Sr Director, Strategic Technology and Security Risk – Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities.

Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

This senior executive role leads the design, execution, and transformation of enterprise-wide risk governance and compliance programs, ensuring adherence to regulatory frameworks such as NYDFS, HIPAA, HITRUST, and SOX. The VP embeds NIST‑aligned, risk‑informed decision‑making into business and security operations while governing risks tied to AI innovation, cloud adoption, and digital transformation.

The role is pivotal for identifying, quantifying and governing strategic and emerging risks, including a focus on cloud adoption, digital transformation, and M&A risk integration. Ensures that the enterprise anticipates, withstands and recovers from disruptions while reducing risk in acquisitions, cloud migrations and vendor integrations and still ensures alignment to the enterprise’s risk appetite and long‑term strategy. Acting as a trusted advisor to the C‑suite and Board, this leader ensures the resilient, compliant and is prepared for disruption.

You’ll enjoy the flexibility to work remotely
* from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

• Strategic Foresight:
  Anticipate and evaluate emerging risks tied to digital information, AI, M&A and regulatory changes. Conduct M&A risk due diligence, focusing on cloud, cybersecurity, regulatory and compliance gas pre and post-close
• Predictive Insights:
  Delivers predictive, AI-driven risk dashboards and scenario analysis for executives. Act as the enterprise authority on resilience and strategic risks tied to cloud adoption, digital transformation, and acquisition activity, ensuring alignment with risk appetite and long‑term growth objectives
• Resilience Leadership:
  Oversees cloud resilience strategies (redundancy, failover, dependency mapping) across multi‑cloud ecosystems. Develop and present executive‑ready storylines, risk insights, and recovery timelines that illuminate enterprise exposures in cloud, digital services, and M&A transactions for the Board and C‑suite
• Governance Alignment:
  Ensures compliance with NIST< ISO, SOX, NYDFS and other regulatory frameworks
• Culture & Influence:
  Drive a risk‑aware culture, balancing innovation with compliance. Aligns risk management to long‑term enterprise strategy and growth objectives. Serves as the senior risk voice in enterprise transformation programs, major technology initiatives, and large‑scale vendor engagements, ensuring risk transparency and resilience outcomes

• Bachelor’s degree in Business, Information Security, Risk Management, Finance, or related field
• Professional certifications such as CRISC, CISA, CISSP, CISM, CPA, CIA, or equivalent required; additional credentials in cloud (AWS, Azure, GCP) or M&A/financial risk a plus
• 20 years of progressive experience in risk management, compliance, cybersecurity, or enterprise resilience, with
• 7 years in senior leadership roles
• Hands‑on experience designing and executing cloud resilience strategies (redundancy, failover, dependency mapping) in multi‑cloud environments
• Significant experience advising Boards, Audit Committees, and Risk Committees on strategic risk exposures and resilience strategies
• Experience leading and developing large cross‑functional teams in matrixed environments, including managing leaders of leaders
• Demonstrated success leading enterprise risk governance in complex, regulated industries (e.g., financial services, healthcare, insurance, or technology)
• Proven track record…