Risk Analyst

Senior Vendor Risk AnalystOptum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.Reporting to the Director Risk Management, the Senior Vendor Risk Analyst is responsible for assessing third-party risk exposure and supporting the organization's vendor risk management program. This role evaluates vendors across multiple risk domains, coordinates cross-functional assessments, and ensures higher-risk findings are appropriately escalated. The position also supports broader enterprise risk management efforts by aligning third-party reviews with organizational risk standards and preparing clear, well-supported risk documentation.If you are located in Draper, UT, Eden Prairie, MN, Washing DC, or New York City, NY, you will have the flexibility to work remotely as you take on some tough challenges.Primary Responsibilities:Review vendor information to assess risk exposure and assign appropriate risk ratings in accordance with established assessment criteriaAnalyze and report on vendor risk across multiple dimensions, including information security, financial, geographic, operational, regulatory, and technology riskCoordinate vendor risk assessments by partnering with subject matter experts and vendor managers to ensure thorough, accurate, and timely completionEscalate higher-risk findings when additional due diligence, mitigation planning, or supplemental assessments are requiredCollaborate with internal stakeholders to gather supporting documentation, clarify risk factors, and facilitate timely assessment outcomesSupport enterprise risk management objectives by aligning third-party risk reviews with broader organizational risk standards and frameworksPrepare Vendor Risk Papers that provide detailed analysis of financial, operational, regulatory, and technology-related risksStrong written and verbal communication skills, with the ability to work effectively across cross-functional teamsYou'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.Required Qualifications:5+ years of experience assessing vendor or third-party riskSolid understanding of vendor risk management principles, including second-line frameworks related to third-party risk oversightFamiliarity with industry compliance standards and frameworks, including ISO 27001, SIG, and SOC 2Proven solid ability to read and analyze financial statements as part of risk evaluation and due diligencePreferred Qualifications:Bachelor's degree or 5+ years of experience in third-party or vendor risk management within the banking industry2+ years of experience with eGRC ArcherExperience contributing to the development of materials and reports for senior and executive management, including Board and management-level committeesExperience working collaboratively with internal stakeholders, subject matter experts, and vendor managersKnowledge of control and risk identification, with the ability to assess the strength of controls across multiple risk factors in complex environments and systemsThorough understanding of risk management policies, best practices, and relevant certificationsProven relationship management skills, including the ability to engage effectively with stakeholders, customers, and vendors, and to build strong professional networksProven ability to assess and evaluate AI-related risks and controls within third-party relationships, including awareness of AI tools, automated decision-making, and emerging AI regulatory requirementsProven ability to synthesize complex risk information into clear, concise, and actionable documentationProven organizational skills, including the ability to successfully manage multiple concurrent prioritiesPay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $72,800 - $130,000 annually based on full-time employment. We comply with all minimum wage laws as applicable.At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.