Principal Cybersecurity Analyst - Remote

Requisition Number: 2381520
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
The Prin Cybersecurity Anlyst serves as a key architect and operational leader responsible for designing, building, evolving, and maintaining the enterprise cybersecurity integration program for acquired entities.
This individual contributor role partners across ESRO, Security Engineering, PMO, Technology, and Acquired Entity leadership to develop scalable cybersecurity integration strategies, playbooks, operating models, governance frameworks, and repeatable implementation approaches that accelerate risk reduction and cybersecurity maturity across acquisitions.
The role combines strategic program design with hands-on execution leadership to continuously improve how acquired entities are assessed, integrated, transformed, and transitioned into enterprise cybersecurity services.
You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.
Primary Responsibilities:

• Program Design & Transformation Strategy
  • Design and evolve the cybersecurity integration framework supporting mergers, acquisitions, and divestitures
  • Develop repeatable methodologies, playbooks, templates, and operational standards supporting acquired entity cybersecurity transformation
  • Define integration approaches based on acquisition size, complexity, maturity, risk profile, and operating model
  • Develop cybersecurity operating models supporting centralized, federated, and hybrid environments
  • Establish scalable processes that improve integration velocity while reducing enterprise risk
• Program Build & Continuous Improvement
  • Build and maintain the end-to-end cybersecurity transformation lifecycle
  • Develop and refine assessment methodologies, graduation criteria, maturity frameworks, and readiness models
  • Analyze lessons learned and continuously improve integration processes, tools, and execution strategies
  • Identify opportunities to simplify delivery and increase operational efficiency through automation and standardization
  • Establish measurable success criteria and outcomes that demonstrate risk reduction
• Security Integration Leadership
  • Partner with cybersecurity domain teams to integrate acquired entities into enterprise security services including:
    • Identity & Access Management
    • Endpoint Security
    • Asset Discovery
    • Vulnerability Management
    • Logging & Monitoring
    • Data Security
    • Cyber Defense
    • Cloud Security
  • Facilitate alignment between acquired entities and enterprise cybersecurity standards
  • Drive prioritization and sequencing of transformation activities across multiple integration initiatives
• Governance & Operational Excellence
  • Establish and maintain governance processes supporting cybersecurity transformation activities
  • Facilitate cross-functional working sessions, workshops, and planning activities
  • Support audit, compliance, and evidence management requirements
• Executive Engagement & Communication
  • Present recommendations, findings, and transformation strategies to cybersecurity and technology leadership
  • Translate complex technical challenges into actionable business-focused recommendations
  • Develop executive communications, briefing materials, roadmaps, and transformation updates
  • Serve as a trusted advisor to program leaders, domain owners, and acquired entity stakeholders

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.
Required Qualifications:

• Bachelor's degree or equivalent experience
• 10+ years of cybersecurity, infrastructure, or enterprise technology experience
• 5+ years of cybersecurity implementation or security engineering experience
• 3+ years supporting acquisitions, integrations, or non-integrated entities
• 3+ years developing operational processes, playbooks, or transformation methodologies
• 3+ years leading cross-functional initiatives and technology deployments
• Experience with endpoint security, vulnerability remediation, asset management, or enterprise security tooling
• Experience translating technical implementation activities into scalable, repeatable integration models
• Proven solid analytical, facilitation, communication, and organizational skills
• Proven ability to operate independently in highly matrixed environments

What Success Looks Like

• Within 12-18 months, this role will:
• Enhance and mature the enterprise cybersecurity transformation methodology
• Improve acquisition integration speed and execution consistency
• Reduce manual effort through standardization and automation
• Increase adoption of enterprise cybersecurity controls across acquired entities
• Establish measurable, repeatable risk reduction outcomes
• Improve executive visibility through standardized reporting and KPIs
• Enable successful graduation of acquired entities into sustainable operational models

Ideal Candidate Profile
This role is ideal for someone who enjoys:

• Building programs rather than simply operating them
• Designing repeatable frameworks and playbooks
• Solving complex integration and transformation challenges
• Working across cybersecurity, engineering, architecture, operations, and leadership teams
• Driving continuous improvement and operational excellence
• Influencing outcomes without direct management responsibility
• Translating strategy into scalable execution

*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.
UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.