Sr. Manager, Insider Risk & Digital Forensics

Huntington National Bank•Atlanta, GA

1d•Onsite

About The Position

This position is an onsite position and available to be filled at any Huntington Corporate office location. The Senior Manager of Insider Risk and Digital Forensics is responsible for the strategic leadership, maturity, and day-to-day execution of the enterprise Insider Threat Program. This role leads the development of capabilities designed to identify, detect, investigate, and mitigate insider risk while protecting the organization's people, data, intellectual property, and critical assets. A successful candidate will partner across Cybersecurity, Human Resources, Legal, Privacy, Risk Management, Compliance, and Technology teams to establish a comprehensive, intelligence-driven insider risk program that leverages behavioral analytics, AI-driven detection capabilities, threat intelligence, and advanced monitoring technologies. This leader will oversee investigations, drive program innovation, and provide strategic guidance to executive leadership regarding emerging insider threats and associated business risks.

Requirements

4+ years of experience in leading insider risk, DLP, cyber investigations, or threat management programs.
2+ years of experience with SIEM, UEBA, DLP, case management, and investigative technologies.
2+ years of experience leading teams and managing complex, high-impact investigations.
Associate's Degree or 4+ additional years of equivalent experience.

Nice To Haves

Strong understanding of insider threat methodologies, behavioral analytics, and cyber threat intelligence.
Experience partnering with HR, Legal, Privacy, Compliance, and Risk functions.
Financial services or highly regulated industry experience.
Experience implementing AI-driven security monitoring and insider risk capabilities.
Experience with digital forensics, incident response, and data protection technologies.
Knowledge of privacy regulations, governance frameworks, and regulatory requirements.
Strong written and verbal communication skills
Bachelor's Degree or 4+ additional years of equivalent experience.

Responsibilities

Lead the strategic direction, maturity, and execution of the enterprise Insider Threat Program.
Develop and maintain multi-year insider risk roadmaps, operating models, governance structures, and performance metrics.
Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics.
Establish program objectives aligned with enterprise cybersecurity, risk management, legal, privacy, and regulatory requirements.
Serve as the primary advisor to senior leadership on insider risk matters, emerging threats, and program effectiveness.
Lead a team responsible for the triage, investigation, remediation, and closure of insider risk and digital forensics investigations.
Oversee complex investigations involving data exfiltration, intellectual property theft, unauthorized access, fraud, policy violations, and misuse of privileged access.
Ensure investigations are conducted with forensic rigor, appropriate evidence handling, and chain-of-custody standards.
Coordinate response activities and remediation efforts with HR, Employee Relations, Legal, Ethics, Privacy, Security, and Technology teams.
Design and enhance insider risk detection capabilities using SIEM, UEBA, DLP, Threat Intelligence Platforms, and AI and advanced analytics solutions.
Develop behavioral analytics and risk scoring models to identify high-risk users and activities.
Create and optimize detection use cases, monitoring processes, investigation workflows, and escalation procedures.
Drive continuous improvement of detection accuracy and investigation efficiency.
Support the development of AI-enabled insider risk monitoring and detection strategies.
Assess risks associated with generative AI, unauthorized AI usage, and emerging technology threats.
Leverage advanced analytics to identify abnormal behavioral patterns and emerging insider threat indicators.
Evaluate new technologies to enhance insider risk visibility, automation, and response capabilities.
Ensure insider risk controls align with enterprise governance and risk management frameworks.
Incorporate industry best practices and frameworks, including CERT Insider Threat Framework, National Insider Threat Task Force (NITTF) Guidelines, and MITRE ATT&CK Framework.
Support regulatory examinations, audits, assessments, and compliance activities.
Develop and maintain insider threat policies, standards, procedures, and playbooks.
Build strong partnerships with Human Resources, Legal, Privacy, Compliance, Enterprise Risk, Physical Security, and Technology leadership.
Lead workshops, interviews, and process reviews to gather requirements and drive program improvements.
Facilitate executive discussions related to insider risk events, trends, and strategic initiatives.
Represent the organization in industry forums and working groups to benchmark capabilities and identify emerging best practices.
Deliver executive-level reporting on program maturity, investigation outcomes, emerging risk trends, and key performance indicators, as well as regulatory and compliance considerations.
Translate technical findings into concise business-focused narratives for executives, auditors, and regulators.
Present strategic recommendations and risk assessments to senior leadership.
Develop insider risk awareness and training programs.
Promote a culture of security, accountability, and responsible data handling.
Lead insider risk tabletop exercises and simulation activities to validate program readiness and response effectiveness.