Vendor Management and Risk Analyst - Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities.

Come make an impact on the communities we serve as you help us advance health optimization on a global scale.

Caring. Connecting. Growing together.

Optum Bank is seeking a Vendor Management Analyst to join a highly visible and dynamic team. As a Vendor Management Analyst, you will play a pivotal role in overseeing vendor relationships, driving efficiency, and ensuring operational excellence across various vendor services. Your key areas of focus will be:

• Regulatory Compliance:
  Develop and implement strategies to ensure vendors adhere to all regulatory requirements and industry best practices
• Risk Management:
  
  Safeguard operational integrity by continuously monitoring vendor compliance and mitigating potential risks
• Stakeholder
  
  Collaboration:
  
  Work closely with internal and external stakeholders, including compliance and legal teams, vendors, and other departments
• Innovation and Customer Focus:
  Foster a forward‑thinking approach to regulatory governance, focusing on continuous improvement and cost‑effectiveness

In addition, this role will involve operational oversight and ongoing development, strengthening regulatory governance initiatives, and being accountable for implementing strategies to enhance vendor compliance. To succeed in this role, you need to work well with all bank leaders and operational functions, inside and outside Optum Bank. The ideal candidate is strategic, collaborative, determined, and detail‑oriented.

You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

• Review third‑party certifications (e.g., SOC 2, ISO 27001, HITRUST) to identify potential gaps or risks
• Track regulatory developments and ensure vendors remain compliant with applicable laws and guidelines (e.g., FDIC, CFPB, etc)
• Validate vendor performance and service level agreements (SLAs)
• Prepare regular reports on vendor risk status for senior leadership, risk committees, and auditors
• Collaborate with internal stakeholders to assess vendor alignment with organizational policies and risk tolerance
• Monitor overall vendor program performance against SLAs, KPIs, and risk mitigation plans
• Partner with Procurement, Legal, IT, and other departments to ensure a holistic approach to third‑party risk management
• Provide training to internal stakeholders on TPRM policies, tools, and best practices
• Maintain a centralized repository of third‑party documentation, including risk assessments, contracts, SLAs, and third party
• Work with vendors and internal teams to remediate identified issues or risks
• Assist in developing and maintaining third‑party governance frameworks, policies, and procedures

You will be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

• 3+ years of vendor management experience within a financial organization
• 2+ years of experience with internal and external audit compliance support (FDIC, FDICIA, GLBA, SOC)
• 2+ years of GRC (Governance, Risk & Compliance) experience
• 2+ years of experience with regulatory guidelines pertaining to security of sensitive data; PII, PCI, PHI, etc.
• 2+ years of experience with HIPPA, PCI, HITRUST, SOX

• Advanced degree or certifications (e.g., CRVPM, CTPRP, CISSP, or CISA)
• Experience with creating presentations for executive audience with the ability to translate and communicate complex Business, IT and operational challenges into perspectives that are…