Senior Cloud Security and Compliance Auditor

Improve the lives of others while Caring. Connecting. Growing together.

Job Description - Senior Cloud Security and Compliance Auditor (2386097)

Senior Cloud Security and Compliance Auditor - 2386097

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, and data they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits, and career development opportunities.

Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.

As a Senior Information Security Risk Auditor within Optum Technology, you will play a critical role in maintaining Optum Public Cloud PCI compliance certification and other compliance standards selected for Optum Cloud platform. You will lead internal and external audits including interpret regulatory/compliance requirements into cloud technology solutions, coordinating appropriate responses and walkthroughs. You will partner with engineering, products and operations teams in managing public cloud compliance and security environment.

In this role, you will leverage enterprise-approved AI tools to streamline workflows, automate remediation, evidence collection, and drive continuous improvement; while leveraging AI tools and data insights to influence stakeholders and deliver security by design and strong business outcomes.

You will enjoy the flexibility to telecommute
* from anywhere within the U.S. as you take on some tough challenges.

• Maintain Optum Public Cloud PCI compliance certification and compliance with security and policies
• Lead internal and external audit; coordinate and manage across cloud security domains
• Translate technical security requirements into cloud architecture solutions and interpret compliance and security requirements into technical solutions and evidence (e.g., system logs, cloud configurations)
• Drive the successful implementation of automation for remediation, optimization, evidence collection, anomaly detection, and continuous control tuning
• Influence stakeholders by translating AI insights and analytical findings into measurable business outcomes
• Partner with engineering and operations teams to remediate findings, support customer requests, and optimize workflows
• Leverage enterprise-approved AI tools to streamline workflows, automate remediation, and drive continuous operational improvement
• Evaluate emerging trends to influence solution design and strategic innovation in cloud security and compliance
• Proven experience in translating state, customer, regulatory, operational, or market insight into product strategy, solution strategy, roadmap decisions, solution priorities, operational improvements, or measurable business outcomes
• Proven executive communication, stakeholder management, strategic planning, and decision-framing skills

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear directions on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

• 5+ years of hands‑on experience with PCI DSS implementation, monitoring, and validation
• 3+ years of cloud security and compliance experience across frameworks such as PCI DSS, SOC 2, HIPAA, HITRUST, or NIST 800-53
• 3+ years of experience managing and coordinating internal and external audits
• 2+ years of working with cloud architecture and the ability to interpret compliance and technical…