Principle Information Security Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities

• Security Governance & Compliance Leadership
• Lead execution of security compliance programs, enterprise security initiatives, and remediation activities across the O&E portfolio
• Ensure adherence to enterprise security policies, standards, regulatory requirements, and audit commitments
• Drive accountability for security-related MBOs, risk reduction objectives, and security performance metrics
• Establish governance processes that improve visibility, ownership, escalation management, and remediation execution across engineering organizations
• Vulnerability Management & Risk Remediation
• Own operational oversight of Critical, High, and Medium vulnerability remediation programs
• Drive timely remediation of known exploited vulnerabilities, security findings, configuration weaknesses, policy violations, and cloud security risks
• Monitor remediation aging, exception approvals, and risk acceptance activities to ensure compliance with enterprise expectations
• Partner with engineering teams to eliminate recurring security issues and improve long-term security posture
• Security Operations & Incident Management
• Oversee security incident coordination, escalation, and response activities impacting O&E applications
• Ensure security impact assessments are performed for major operational incidents and technology events
• Drive post-incident reviews focused on prevention, control improvements, and risk mitigation
• Support threat monitoring, operational readiness, and proactive risk identification efforts
• Team Leadership & Organizational Development
• Provide direct leadership, coaching, and performance management for India-based security resources and contractors
• Establish clear operational priorities, workload management, and accountability frameworks
• Build organizational depth, succession coverage, and scalable operating practices for the security function
• Develop team capabilities in vulnerability management, security operations, compliance governance, automation, and cloud security
• Foster a culture of operational excellence, continuous improvement, and proactive risk management
• Security Reporting & Executive Visibility
• Own security operational reporting, dashboards, scorecards, and leadership communications
• Prepare executive-level reporting related to vulnerabilities, remediation performance, risk records, compliance status, and emerging threats
• Track and communicate security trends, operational risks, and remediation progress across the portfolio
• Drive data-driven decision making through actionable metrics and performance indicators
• Security Automation & Modernization
• Identify opportunities to automate compliance tracking, vulnerability remediation workflows, reporting, and operational processes
• Partner with AI Ops, Cloud, and Engineering teams to improve operational efficiency through automation and tooling
• Support security enablement activities associated with cloud transformation, modernization programs, and emerging technology initiatives
• Drive adoption of scalable security operating models that support continued portfolio growth
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
  

• Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline
• 8+ years of experience in Security Operations, Vulnerability Management, Information Security, Technology Operations, or related fields
• 3+ years of people leadership or team management experience
• Experience managing security compliance, remediation, risk management, or operational security programs at enterprise scale
• Proven experience partnering with engineering and technology teams to drive remediation and operational improvements
• Solid knowledge of:
• Vulnerability Management
• Security Governance
• Risk Management
• Incident Response
• Compliance Programs
• Cloud Security
• Security Metrics & Reporting
• Demonstrated solid communication, stakeholder management, and program execution skills
  

• Experience supporting large-scale application portfolios in highly regulated industries
• Experience with Azure, AWS, Kubernetes, and cloud-native security controls
• Experience driving automation initiatives using scripting, workflow automation, or AI-enabled operational tooling
• Familiarity with ServiceNow, vulnerability management platforms, eGRC tools, Power BI, and security reporting solutions