Join Optum, a global health services and innovation company dedicated to making healthcare work better for everyone. We leverage technology to empower millions to live healthier lives by connecting them with the care, pharmacy benefits, data, and resources they need.

This Information Security Analyst role is crucial for upholding customer and contractual security commitments, particularly in vulnerability management. You will act as the primary bridge between various security, application, infrastructure, and customer-facing teams. Your efforts will ensure vulnerabilities are meticulously tracked, remediated within established service levels, and properly documented for both internal governance and external client reporting.

This is an opportunity to contribute to a culture of inclusion, collaborate with talented peers, and develop your career within a comprehensive benefits framework. Help us advance health optimization globally and make a tangible impact on the communities we serve. Let's start Caring. Connecting. Growing together.

Coordinate the end-to-end vulnerability remediation lifecycle, ensuring compliance with internal policies, SLAs, contractual obligations, and regulatory requirements.

Manage and validate vulnerability exception requests, securing appropriate documentation and approvals.

Escalate overdue vulnerabilities to management and relevant stakeholders, and validate remediation status and evidence before closure.

Support vulnerability governance meetings and maintain accurate action item tracking.

Interpret and ensure adherence to customer-specific security requirements related to vulnerability management.

Provide customers and internal account teams with regular updates on remediation status.

Assist with customer security reviews, audits, assessments, and questionnaires, and maintain supporting documentation for contractual security obligations.

Develop detailed remediation summaries, executive reports, and customer-facing status reports, ensuring audit-ready documentation for all findings and corrective actions.

Produce recurring vulnerability management reports and dashboards, tracking SLA performance, aging vulnerabilities, remediation trends, and exceptions.

Analyze remediation trends to identify opportunities for process improvement and support Key Risk Indicator (KRI) and Key Performance Indicator (KPI) reporting.

Collaborate effectively with application, infrastructure, engineering, and operations teams to coordinate remediation efforts across business units.

Engage with Security Operations, Vulnerability Management, Risk Management, Compliance, and customer account teams to facilitate discussions on remediation priorities and risk reduction strategies.

Possess strong technical security knowledge, including the vulnerability management lifecycle, CVSS scoring, CVE, security testing methodologies (DAST, SAST, SCAP), vulnerability scanning, penetration testing, patch management, risk management principles, and security controls.

Demonstrate experience with enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7, Microsoft Defender, Prisma Cloud, GitHub Advanced Security, or ServiceNow Vulnerability Response.

Exhibit solid technical writing skills, with a proven ability to create executive summaries, collect audit evidence, generate customer-facing reports, respond to security questionnaires, document processes, and develop metrics and dashboards.

Have working knowledge of regulatory frameworks including HITRUST, HIPAA, NIST Cybersecurity Framework, NIST 800-53, ISO 27001, and SOC 2, as well as customer security contractual requirements and third-party risk management practices.

Apply strong analytical skills for root cause analysis, trend identification, risk assessment, data analysis, SLA tracking, and prioritization of remediation efforts.

Communicate effectively through customer-facing interactions, executive reporting, stakeholder management, meeting facilitation, conflict resolution, and escalation management, with the ability to translate technical findings into business risk language.

Possess a Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, or a related field, with 3+ years of experience in Information Security, Vulnerability Management, Risk Management, Compliance, or Security Operations.

Experience supporting customer security reviews, audit responses, and working with enterprise vulnerability remediation programs is preferred.