Note: The job is a remote job and is open to candidates in USA. UnitedHealth Group is a global organization that delivers care aided by technology. The Senior Manager, Tech Product Management is responsible for leading the design, implementation, and continuous improvement of governance routines to ensure adherence to technology and cybersecurity standards.
Responsibilities
- Define and implement a comprehensive technology and cybersecurity governance framework, including oversight routines, risk reporting structures, and escalation pathways
- Design and collaborate with Technology and Cybersecurity teams to operationalize risk governance routines that integrate into day-to-day technology processes (e.g., SDLC, cloud deployments, third-party onboarding)
- As part of governance, collaborate with Technology and Cybersecurity teams to ensure they define Key Risk Indicators (KRIs), Key Control Indicators (KCIs), and performance metrics, including thresholds aligned to risk appetite that support the GRC metrics framework
- Lead risk profiling and aggregation activities, connecting control effectiveness, threat landscape, and business impact into a clear enterprise risk view
- Evaluate and challenge governance processes to ensure consistency, scalability, automation, and sustainability
- Drive standardization of governance practices across disparate technology teams and domains
- Assess effectiveness of preventive vs. detective controls, continuous monitoring capabilities, and automated controls
- Influence leadership to strengthen risk ownership, accountability, and decision-making discipline
- Ensure governance routines satisfy regulatory, audit, and industry framework expectations
Skills
- Associate's degree (or higher) in Information Security, Risk Management, Business, or related field
- 10+ years in technology and information security with solid experience in risk governance, control assurance, and cybersecurity risk management
- 5+ years working across matrixed organizations with multiple stakeholders
- Demonstrated experience in: Designing or maturing risk governance routines and frameworks
- Defining risk metrics, thresholds, and escalation processes
- Assessing control effectiveness at scale
- Experience in technology engineering, technology development, technology infrastructure or cybersecurity management
- Certifications: CISA, CRISC, CISSP, CISM
- Experience in large-scale governance transformation or audit modernization initiatives
- Exposure to cloud governance, AI risk frameworks, and DevSecOps environments
Benefits
- A comprehensive benefits package
- Incentive and recognition programs
- Equity stock purchase
- 401k contribution (all benefits are subject to eligibility requirements)
- Flexibility to work remotely * from anywhere within the U.S.
- W2 option
Company Overview