Insider Threat Investigator

TransUnion • Chicago, IL

5d • Hybrid

About The Position

TransUnion's Global Insider Threat Program (GITP) is dedicated to safeguarding company data, intellectual property, and information systems from insider risks. This involves proactive monitoring, data protection, risk detection, and investigative capabilities. As a part of the Cyber Defense organization, GITP collaborates closely with Human Resources, Legal, Compliance, Employee Relations, Information Security, and business leaders to identify, investigate, and mitigate insider threats, while also supporting global regulatory, privacy, and business protection objectives. This role reports to a Senior Director.

Requirements

• 5+ years of relevant investigative experience with a Bachelor degree or equivalent experience and certifications.
• Demonstrated experience leading sensitive investigations and a strong understanding of investigative methodologies and evidence handling.
• Experience with Data Loss Prevention technologies and workflows.
• Experience collaborating with HR, Legal, Employee Relations, and Compliance.
• Experience with Microsoft Purview: eDiscovery, Insider Risk Management.
• Experience with Cybersecurity Capabilities: EDR, CASB, SIEM.

Nice To Haves

• Corporate Insider Threat Program experience.
• Large global enterprise investigation experience.
• Experience building playbooks, metrics, and maturity initiatives.
• Experience with Insider Threat mitigation platforms such as Securonix, Exabeam, Teramind, Proofpoint.
• CFE, GCFA, CISSP, or similar certifications.

Responsibilities

• Independently lead complex insider threat investigations from intake through closure.
• Analyze technical, behavioral, and business context to identify insider risk, determine root cause, and assess organizational impact.
• Conduct investigative interviews with witnesses, managers, and investigation subjects.
• Collect, preserve, correlate, and analyze evidence from endpoint, network, cloud, identity, and collaboration platforms.
• Prepare executive-ready investigative reports and recommendations.
• Partner with Human Resources, Employee Relations, Legal, Compliance, and Cybersecurity stakeholders.
• Identify trends, recurring risk indicators, and control gaps and recommend improvements.
• Support development of investigative methodologies, playbooks, and standards.
• Contribute to strategic initiatives that enhance the global insider threat program.

Benefits

• Day-one eligibility for medical, dental, and vision coverage.
• Supplemental plan options.
• Spousal, domestic partner, and other eligible dependent coverage.
• Tax-advantaged HSA and FSA accounts.
• Company-paid basic life and AD&D.
• Optional voluntary life and AD&D for you and your family.
• Short- and long-term disability.
• Legal plan.
• Pet insurance.
• Travel accident coverage.
• Adoption assistance.
• Fertility planning coverage.
• Caregiver support.
• Dependent Care FSA with possibility of an employer match.
• Complimentary Care@Work membership.
• Up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
• 401(k) with employer match.
• Employee Stock Purchase Plan (ESPP).
• Financial wellness resources.
• Career coaching.
• Optional long-term care insurance.
• Tuition reimbursement.
• Flexible time off for exempt employees or paid time off for nonexempt employees.
• Up to 12 paid holidays per year.
• Commuter benefits.
• Employee discounts.
• Charitable gift matching.
• Paid volunteer time off.
• Corporate volunteer events.
• 24/7 support including professional therapy, coaching, and emotional well-being programs.
• Guided meditation and resources that support physical, mental, social, and financial wellness.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior