Director, GRC Transformation and Enablement- Remote or Hybrid in MN or DC

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.   

The Director, GRC Operating Model & Transformation Enablement leads enterprise-scale change, adoption, and operationalization required to embed cyber, technology, and AI risk management into how UnitedHealth Group operates day to day. This role sits within the team responsible for defining and owning the enterprise GRC operating model and the platforms that power it, leading the design, build, and continuous evolution of integrated GRC tools that embed risk, policy, and control execution directly into technology and business workflows.

This role is accountable for driving people, process, technology, and behavioral change to ensure new GRC capabilities are not only implemented, but consistently adopted, sustained, and producing measurable risk reduction and compliance outcomes across cyber, technology, and business teams. It is an execution-focused leadership role that bridges strategy and operations-ensuring platform-led GRC transformation translates into durable, scalable ways of working across a highly matrixed, regulated environment.

You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities:

• Lead enterprise change management and adoption strategy for cyber, technology, and AI risk initiatives, translating GRC objectives into clear, role based expectations
• Operationalize the Cyber & Technology Risk operating model across policy, risk, control, and enablement pillars
• Embed risk, control, and policy execution into technology delivery lifecycles, business planning processes, and remediation workflows
• Define role clarity, decision rights, and accountability models to execute GRC consistently at scale across business units and lines of defense
• Partner with leaders, HR, and enablement teams to build risk, control, and accountability fluency across the enterprise
• Establish adoption and maturity indicators tied to cycle time, remediation performance, audit readiness, and residual risk reduction
• Execute and track multi year GRC transformation roadmaps with clear milestones, dependencies, and outcomes
• Partner with senior leaders to provide visibility into adoption, operational maturity, and execution risks while supporting defensible risk decisions
• Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement
• Evaluate emerging trends to inform solution design and strategic innovation

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• Bachelor's degree or equivalent experience (e.g., 4+ years of additional experience in enterprise technology, risk, or compliance in lieu of a degree)
• 15+ years of experience across enterprise technology, risk, compliance
• 7+ years of experience in senior leadership roles driving change across large, matrixed organizations
• 5+ years of experience operating in highly regulated environments (such as healthcare, insurance, or financial services)
• 4+ years leading GRC operating model and tool transformation, end-to-end ownership of GRC solutions

Preferred Qualifications:

• Advanced degree (such as an MBA or MS in Business, Technology, Risk Management, or related field)
• Professional certifications such as CRISC, CISA, CISSP, CISM, SAFe, Agile, or Prosci
• Deep understanding of enterprise change leadership, organizational acumen, and systems thinking across policy, risk, control, and platforms
• Proven success leading enterprise adoption where authority is indirect
• Outstanding executive influence and communication skills, with a track record of partnering with senior leaders across cyber, tech, and business

*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $134,600 - $230,800 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.    

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.