Bachelor's degree in Information Security, Information Technology, Cybersecurity, Computer Science, Engineering, or a related field , OR equivalent professional experience in military, law enforcement, or government service
Minimum 6 years of experience in insider risk management, security investigations, compliance, behavioral analysis, or a closely related domain
Demonstrated high level of integrity with a proven track record of maintaining strict confidentiality and handling sensitive matters with discretion
Strong understanding of insider threat tactics, adversary behaviors (TTPs), and common risk indicators within financial services environments
Solid knowledge of behavioral analysis techniques, user and entity behavior analytics (UEBA), and investigative methodologies
Working knowledge of relevant regulatory frameworks and legal requirements, including SOX, GLBA, FINRA, and SEC regulations
Strong analytical mindset with excellent critical thinking, research, problem-solving, and data synthesis skills focused on threat identification and risk mitigation
Proven ability to obtain, analyze, and synthesize information from multiple sources, including user activity data, system logs, and witness interviews
Ability to communicate complex findings and actionable insights to diverse audiences, from frontline managers to C-suite executives
Demonstrated ability to influence and build trusted relationships with HR, Legal, Technology, and executive leadership — both internal and external partners
Highly self-motivated with sound judgment, strong initiative, and the ability to work independently on sensitive matters
Proven ability to manage competing priorities across multiple complex, concurrent investigations and program initiatives
Excellent verbal, written, and interpersonal communication skills with the highest level of professionalism
Strong proficiency in Microsoft Office (Excel, PowerPoint, Word, Visio) and experience with data analysis and investigative reporting tools
Nice To Haves
Hands-on experience with Data Loss Prevention (DLP) platforms and tools
Hands-on experience with digital forensics tools
Experience with Microsoft Purview, including Insider Risk Management, eDiscovery, and/or Communications Compliance modules
Background in law enforcement, military service, government, or corporate investigations
Relevant certifications such as CISSP, CISM, CFE, or equivalent
Responsibilities
Develop, implement, and continuously mature insider risk policies, procedures, and controls aligned with regulatory requirements and industry best practices.
Monitor, analyze, and assess user behavior and activity data using UEBA tools and other analytics platforms to identify potential insider threat indicators, anomalies, and emerging risk patterns.
Lead and coordinate investigations of suspected insider risk incidents, including evidence collection, documentation of findings, and recommendation of remediation or escalation actions.
Collaborate closely with HR, Legal, Corporate Security, Technology, and line-of-business leadership to investigate concerning user conduct and drive appropriate, timely responses.
Provide risk assessment and advisory services to business units regarding insider threat exposures, vulnerability gaps, and mitigation strategies.
Prepare reports, program dashboards, and executive-level metrics demonstrating program effectiveness for senior management and regulatory bodies.
Design and facilitate training and awareness initiatives that promote a culture of security, compliance, and shared responsibility across the firm.
Maintain thorough documentation of insider risk cases, metrics, and program activities in compliance with records management and legal hold requirements.
Benefits
health insurance coverage
wellness program
fertility and family building aids
life and disability insurance
retirement savings plans with a generous 401K match