Principle Information Security Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. Primary Responsibilities: Security Governance & Compliance LeadershipLead execution of security compliance programs, enterprise security initiatives, and remediation activities across the O&E portfolioEnsure adherence to enterprise security policies, standards, regulatory requirements, and audit commitmentsDrive accountability for security-related MBOs, risk reduction objectives, and security performance metricsEstablish governance processes that improve visibility, ownership, escalation management, and remediation execution across engineering organizationsVulnerability Management & Risk RemediationOwn operational oversight of Critical, High, and Medium vulnerability remediation programsDrive timely remediation of known exploited vulnerabilities, security findings, configuration weaknesses, policy violations, and cloud security risksMonitor remediation aging, exception approvals, and risk acceptance activities to ensure compliance with enterprise expectationsPartner with engineering teams to eliminate recurring security issues and improve long-term security postureSecurity Operations & Incident ManagementOversee security incident coordination, escalation, and response activities impacting O&E applicationsEnsure security impact assessments are performed for major operational incidents and technology eventsDrive post-incident reviews focused on prevention, control improvements, and risk mitigationSupport threat monitoring, operational readiness, and proactive risk identification effortsTeam Leadership & Organizational DevelopmentProvide direct leadership, coaching, and performance management for India-based security resources and contractorsEstablish clear operational priorities, workload management, and accountability frameworksBuild organizational depth, succession coverage, and scalable operating practices for the security functionDevelop team capabilities in vulnerability management, security operations, compliance governance, automation, and cloud securityFoster a culture of operational excellence, continuous improvement, and proactive risk managementSecurity Reporting & Executive VisibilityOwn security operational reporting, dashboards, scorecards, and leadership communicationsPrepare executive-level reporting related to vulnerabilities, remediation performance, risk records, compliance status, and emerging threatsTrack and communicate security trends, operational risks, and remediation progress across the portfolioDrive data-driven decision making through actionable metrics and performance indicatorsSecurity Automation & ModernizationIdentify opportunities to automate compliance tracking, vulnerability remediation workflows, reporting, and operational processesPartner with AI Ops, Cloud, and Engineering teams to improve operational efficiency through automation and toolingSupport security enablement activities associated with cloud transformation, modernization programs, and emerging technology initiativesDrive adoption of scalable security operating models that support continued portfolio growthComply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do soRequired Qualifications: Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline8+ years of experience in Security Operations, Vulnerability Management, Information Security, Technology Operations, or related fields3+ years of people leadership or team management experienceExperience managing security compliance, remediation, risk management, or operational security programs at enterprise scaleProven experience partnering with engineering and technology teams to drive remediation and operational improvementsSolid knowledge of:Vulnerability ManagementSecurity GovernanceRisk ManagementIncident ResponseCompliance ProgramsCloud SecuritySecurity Metrics & ReportingDemonstrated solid communication .