Insider Risk Analyst, Senior

Pacific Gas And Electric Company•Concord, CA

4d•$122,000 - $194,000•Hybrid

About The Position

We are seeking an experienced Senior Insider Risk Analyst to lead the detection, assessment, and mitigation of insider risk across the enterprise. In this role, you will help safeguard the company’s people, assets, operations, intellectual property, and sensitive data from malicious or negligent insider actions or from risks arising from compromised accounts or external influence. This role is responsible for analyzing insider risk indicators, conducting assessments, and supporting mitigation strategies across technical and non-technical risk domains. This position combines technical analysis, behavioral analytics, and close collaboration with cross-functional teams including Human Resources, Legal, Ethics & Compliance, Physical Security, Cybersecurity, IT, Privacy, and Internal Audit. The ideal candidate can interpret technical indicators in context, applying sound judgment, behavioral insight, and empathy when assessing sensitive matters. This position is hybrid, working from your remote office and Concord, CA, 2 - 3 days on average per week, or more based on business needs or company requirements.

Requirements

High School or GED-General Educational Development-GED Diploma
6 years of analytical or investigative experience in intelligence/counterintelligence, law enforcement, security, insider threat, or other related experience
Experience in IT-Information Technology security or investigative technologies, multi-platform, or related
Must be able to qualify for NERC CIP clearance

Nice To Haves

Bachelor’s degree in computer science or job-related discipline or equivalent experience
Relevant professional training or credentials such IT Security, Physical Security, Insider Risk, or Fraud certifications
Intelligence/counterintelligence, law enforcement, or utility security experience

Responsibilities

Detect anomalous indicators through SIEM, UEBA, DLP, EDR, identity/access logs, SaaS audit logs, and endpoint telemetry.
Investigate anomalies and complex activities by correlating technical logs with non-technical (HR indicators, travel, open-source information, access logs, business information) contextual information.
Use scripting (Python/PowerShell), data analysis toolkits, and approved GenAI agents to identify anomalies, trends, and synthesize findings.
Produce written reports and verbal summaries of findings, analysis, and recommendations tailored for cross-functional stakeholders and management audiences.
Review and apply threat intelligence from commercial, government, and industry sources to refine threat indicators and enhance detection and assessment methodologies.
Collaborate with subject matter experts across stakeholder groups and business functional areas.
Support investigative and incident response activities including initial containment, mitigation strategies, investigative support, requests for information, etc.
Prioritize multiple-case workloads demonstrating an ability to independently triage work based on observable indicators and business priorities.
Apply judgement and discretion in sensitive matters using the totality of information available to make informed recommendations.