Senior Fraud Analyst

ADP•Roseland, NJ

2h•Hybrid

About The Position

The Critical Incident Response Center Senior Fraud Analyst within ADP''s Global Security Organization (GSO) Global Cybersecurity Services is responsible for monitoring multiple sources of analytical computer and physical security related information. The CIRC''s main focus is to take this disparate information and turn it into strategic and tactical intelligence that is relevant to protecting ADP''s lines of business. The output of this analysis will be used to ensure a consistent and coordinated response to ongoing security threats ensuring ADP can continue to operate safely and securely. The Senior CIRC Analyst, who will be part of AMRS CIRC team and the wider GCS organization of the GSO, must have holistic understanding of the modern cyber fraud and basic knowledge of the cyber security landscape with a strong background in incident response and process documentation. They will handle high complexity security threats generated by ADP''s automated detection systems, 3rd party and internal intelligence, and manual identification by ADP associates and clients. The successful candidate will triage all automated alerts for suspicious transactions identified inside of ADP''s money movement and TPSI platforms. The Senior Fraud Analyst will process alerts towards resolution and support critical incidents through standard applications and processes. In addition, the Senior Fraud Analyst will act as the escalation contact of fraud analysts and as lead fraud investigator and incident owner of high severity fraud cases. The Senior CIRC Analyst must have the requisite knowledge to document procedures and ensure appropriate reporting, acquire full understanding of fraud alerts/events/incidents, and, if needed, escalate to ADP''s CIRC leads/managers for appropriate action. This role will be responsible for following detailed procedures for addressing high-risk activity and will be based on a follow-the-sun (FTS), 24x7 model. The Senior CIRC Analyst role is Hybrid with three days per week in Roseland, NJ. The role will work in a rotation schedule that includes weekends and holiday coverage.

Requirements

4-5 years’ experience in efraud auditing in a large organization
2 years’ work experience in the financial services industry
2 years’ work experience handling fraud or cyber fraud incident activities
Professional experience investigating check fraud, payroll fraud, credit card fraud, consumer lending, or other transactional business involving money movement
Professional experience investigating compromised credentials, account takeovers, social engineering, phishing, and identity theft
Strong analytical, investigative, and documentation skills is a must; this includes professional experience in root cause analysis of fraud losses
Strong understanding of fraud risk management principles and practices for prevention, detection, response, remediation, and reporting of fraud
Able to exercise judgment and influence on key technical decisions (i.e. standards, policies, processes, and technical solutions etc)
Must be familiar with and/or willing to learn cyber concepts, tasks, and processes
IT / Cyber / Threat / Intel / Business familiarity and experience in a large global organization is a plus
Experience with Splunk and SQL / KQL / PostgreSQL to generate queries is a plus
Must be willing to learn use of various cyber tools and various applications, including payroll, security management system, identity services, etc)
Ability to train and mentor team members, both onshore and offshore teams,
Forms productive networks with internal and external business partners.
Good teamwork, communication/information sharing, strong analytical skills and influencing skills
Highly proficient in Excel and fluency in Microsoft Office tools
Familiarity with multiple browsers, multiple tabs, window navigation, and instant messaging tools
Excellent verbal and written communication skills, exceptional interpersonal skills are required
Sense of urgency required while maintaining a high degree of professionalism.
The ability to work with minimal supervision, prioritize and manage multiple cases, and achieve desired results in a fast-paced environment.

Nice To Haves

You'll have a bachelor's degree or equivalent.
CFE, GIAC, Sec+ certifications or equivalent are a plus
IT / Cyber / Threat / Intel / Business familiarity and experience in a large global organization is a plus
Experience with Splunk and SQL / KQL / PostgreSQL to generate queries is a plus

Responsibilities

Monitor and triage incidents in the CIRC alert queue
Serves as level 2 escalation for regular-high severity fraud cases, acting as lead fraud investigator and incident owner, where needed
Validates possible security incident and alerts for suspicious activities or transactions identified inside of ADP''s systems and money movement platforms; determine if escalation is required
Process alerts and events towards resolution and support critical incidents through standard applications and processes
Follow documented technical and management escalation processes to escalate up to the CIRC leads/managers, as well as other BUs and stakeholders as quickly as possible
Communicate alert progress status though the use of standard tools
Conduct technical analysis and assessments of security related incidents
Coordinates with other CIRC units, and other fraud stakeholders within GSO, including but not limited to Content Development, Threat Intelligence, Global Fraud Prevention, and the Converged Security Services
Maintains situational awareness of incidents from other units/organizations that may require CIRC involvement
Supports incident work streams, as directed by the lead, incident coordinator, manager, and/or other supervisors
Serves as designated SME for specific fraud processes and events
Helps the Lead and up develop, document, and formalize a standardized global fraud incident response processes.
Performs correlation of IOFs and IOCs
CIRC hotline monitoring and documentation
Provides complete and detailed information to next shift during Turn Over. Ensure that next shift is fully equipped with information needed to handle the incident before disengaging. Introducing next shift team member to the technical support teams for proper hand over.
Be part of the team to generate weekly and monthly reports and provide analysis of incidents and identify areas of improvement.
Participates in extended turn over sessions to share knowledge across regions.
Mentors and coordinates the fraud training of CIRC analysts
Help train, assign, and monitor work of fraud team members
Provides inputs and feedback on the performance of associates during trainings
Mentors new team members
Performs other duties as assigned