Director, Security Trust Office - On Site MN

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us in making healthcare work better for everyone through people-led, responsible AI while Caring. Connecting. Growing together.

The Enterprise Security Office (ESO) Trust Office initiative is dedicated to enhancing market trust, driving enterprise transparency for clients and stakeholders, and serving as a trusted security partner across the healthcare ecosystem. You will serve as a senior technical authority driving customer-related security engagement strategies and working directly with executive leadership to integrate security strategies into key customer interactions.

This role focuses on driving the enterprise's centralized security strategy while translating complex, technical security architectures to external audiences, regulatory bodies, and strategic business partners. Key strategic pillars include Sales Enablement (mitigating risk and preventing lost commercial opportunities due to compliance requirements), Customer Confidence (providing transparent, frictionless security evaluations), and Regulatory Alignment (centralizing global compliance frameworks and automating audit workflows).

*This position is scheduled as on-site four days in-office per week.

Primary Responsibilities:

• Formulate and execute the enterprise security trust vision and multi-year strategy, aligning technical security posture with business growth targets and regulatory standards
• Partner with executive leadership across the enterprise to establish and govern a scalable Trust Office framework that effectively addresses client security inquiries and risk assessments
• Drive strategic sales enablement by partnering with executive client account teams on complex security commitments during major RFP, contracting, and vendor evaluation processes
• Represent the Trust Office as a strategic technical authority during critical incident response engagements and executive client meetings
• Establish and maintain strategic relationships with enterprise customers, auditors, and key industry partners to articulate the organization's security posture and compliance maturity
• Evaluate emerging global cybersecurity threats, industry shifts, and regulatory mandates, recommending proactive enterprise-wide measures to reinforce resilience and trust
• Direct technical strategy and oversight for high-priority client security responses, assessments, audits, RFPs, and contractual security reviews
• Serve as the ultimate technical escalation point for enterprise Trust Office issues and high-stakes client security inquiries
• Prepare and deliver strategic security trust briefings, metrics, and risk reports to executive leadership and board-level committees
• Oversee the integrity and accuracy of client-facing security documentation, audit collateral, and internal/external trust portals

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

Required Qualifications:

• 12+ years of progressive technical experience in information security, risk management, or cybersecurity compliance
• 7+ years of experience collaborating with cross-functional executive teams and driving enterprise-level security programs
• 5+ years of experience leading high-stakes technical customer security reviews, enterprise risk assessments, and executive-level RFP negotiations
• 5+ years of experience designing, building, or scaling an enterprise Security Trust Office, Trust Center, or customer security framework
• Demonstrated experience communicating complex cybersecurity concepts and risk metrics directly to executive leadership, board members, and external client leadership
• In-depth mastery of enterprise security frameworks (e.g., NIST CSF, ISO 27001), data privacy laws (e.g., GDPR, CCPA, HIPAA), and global compliance standards
  

Preferred Qualifications

• Master's degree in Information Security, Computer Science, Business Administration, or a related technical field
• Active industry certifications such as CISSP, CISM, CISA, or CRISC
• Proven experience implementing enterprise automated trust platforms, NDA automation tools, and security questionnaire systems
• Deep domain expertise in healthcare cybersecurity regulations (e.g., HITRUST, HIPAA Security Rule, FedRAMP)
  
  

*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $134,600 - $230,800 annually based on full-time employment. We comply with all minimum wage laws as applicable.

At UnitedHealth Group, our mission is to help people live healthier lives and help make the health system work better for everyone. Together, we are shaping the future of healthcare by harnessing technology and innovation to make care simpler to navigate, more affordable and more connected for the people we serve. We are committed to creating an inclusive workplace where everyone feels welcomed, valued, heard and respected, empowering people to bring their authentic selves to work and strengthening our collective impact through diverse talents, backgrounds, experiences and perspectives.

UnitedHealth Group and its affiliated brands are an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group and its affiliated brands are a drug-free workplace. Candidates are required to pass a drug test before beginning employment.