Senior Vendor Risk Analyst - Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data, and resources they need to feel their best. You will work in the Optum division of UnitedHealth Group.  Optum delivers care aided by technology and data, empowering people, partners and providers with the guidance and tools they need to achieve better health. UnitedHealthcare offers a full range of health benefits, enabling affordable coverage, simplifying the health care experience, and delivering access to high-quality care.

Come make an impact on the communities we serve as we help advance health equity on a global scale. Here, you will find talented peers, comprehensive benefits, a culture guided by diversity and inclusion, career growth and opportunities.

Reporting to the Director Risk Management, the Senior Vendor Risk Analyst is responsible for assessing third-party risk exposure and supporting the organization's vendor risk management program. This role evaluates vendors across multiple risk domains, coordinates cross-functional assessments, and ensures higher-risk findings are appropriately escalated. The position also supports broader enterprise risk management efforts by aligning third-party reviews with organizational risk standards and preparing clear, well-supported risk documentation.

If you are located in Draper, UT, Eden Prairie, MN, Washington DC, or New York City, NY, you will have the flexibility to work remotely* as you take on some tough challenges.

Primary Responsibilities:

• Review vendor information to assess risk exposure and assign appropriate risk ratings in accordance with established assessment criteria
• Analyze and report on vendor risk across multiple dimensions, including information security, financial, geographic, operational, regulatory, and technology risk
• Coordinate vendor risk assessments by partnering with subject matter experts and vendor managers to ensure thorough, accurate, and timely completion
• Escalate higher-risk findings when additional due diligence, mitigation planning, or supplemental assessments are required
• Collaborate with internal stakeholders to gather supporting documentation, clarify risk factors, and facilitate timely assessment outcomes
• Support enterprise risk management objectives by aligning third-party risk reviews with broader organizational risk standards and frameworks
• Prepare Vendor Risk Papers that provide detailed analysis of financial, operational, regulatory, and technology-related risks
• Strong written and verbal communication skills, with the ability to work effectively across cross-functional teams

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• 5+ years of experience assessing vendor or third-party risk
• Solid understanding of vendor risk management principles, including second-line frameworks related to third-party risk oversight
• Familiarity with industry compliance standards and frameworks, including ISO 27001, SIG, and SOC 2
• Proven solid ability to read and analyze financial statements as part of risk evaluation and due diligence

Preferred Qualifications:

• Bachelor's degree or 5+ years of experience in third-party or vendor risk management within the banking industry
• 2+ years of experience with eGRC Archer
• Experience contributing to the development of materials and reports for senior and executive management, including Board and management-level committees
• Experience working collaboratively with internal stakeholders, subject matter experts, and vendor managers
• Knowledge of