Sr Info Security Risk Anayst (IT Audit/IT Security Control) - Taguig - ref. l30763115

Join us to start Caring. Connecting. Growing together.

This position is responsible for analyzing, investigating and assisting with the execution of IT risk assessments and security consulting activities to assess the design, effectiveness and efficiency of IT controls and compliance with laws and regulations.

Primary Responsibilities:

• Participates in walk-throughs, identifies and documents risks and controls and obtains evidence as applicable
• Drafts documentation request lists
• Works with team member to develop test steps, when applicable
• Executes test steps in accordance with the applicable framework, providing clear and concise testing documentation for review
• Interprets testing results and formulate conclusions based on assessment of control findings and root cause analysis results
• Works with business partners to present and validate potential issues and IT security risks and facilitates the development of appropriate remediation plans
• Drafts issues and performs root cause analysis with practical corrective solutions
• Participates on special projects undertaken by the department and/or the Company

What skills/attributes are a must have:

• 2+ years of relevant IT and audit experience
• 2+ years of understanding of IT security and internal control concepts and their practical application
• Health or related insurance experience
• 2+ years of PCI, HIPPA, HITRUST, SSAE18, SOX 404, NIST 800-53 experience
• Strong interpersonal skills while working effectively with a team
• Strong oral and written communication skills
• Desire to make a positive impact with the ability to manage multiple tasks and shift priorities

Nice to Have:

Relevant IT certification(s) (e.g. CISSP, CISA, CISM, CIPT, CSFP, ISA, CIA, etc.)

Optum, incredible ideas in one incredible company and a singular opportunity to do your life's best work.

#LetsGrow