Threat Management & Insider Risk Manager

Amentum•Richmond, VA

1d•Remote

About The Position

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Our people apply undaunted curiosity, relentless ambition and boundless imagination to challenge convention and drive progress. Our commitments are underpinned by the belief that safety, collaboration and well-being are integral to success. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents. Amentum’s Global Security & Resilience (GS&R) function is responsible for development of company-wide global physical security programs contributing to the resilience of the organization. Team members are expected to lead their respective areas of responsibility while contributing to other areas such as physical security standards & technology, international program security, travel security, crisis management, and business continuity. The Threat Management and Insider Risk Manager oversee Amentum’s Insider Risk Program, managing insider risk-related policies and processes, assessing risk, and leading mitigative actions. The position emphasizes collaboration, analysis, and program management, aligning insider risk efforts with organizational goals while adhering to government and regulatory compliance requirements. This position requires a proactive and analytical mindset, strong leadership, and the ability to collaborate effectively across functional teams to build a robust threat management and insider risk framework that aligns with the company’s goals. This position is US remote telework and US Citizenship is required.

Requirements

Typically 8 years of experience in security, investigations, intelligence & analysis, insider risk/threat management, or a related field with a Bachelor's degree in a related field; or 5+ years of relevant experience with Masters degree.
Usually with 2+ years of experience leading, mentoring, and/or delegating the work of others.
Currently possess or able to obtain U.S. government security clearance.
Familiarity with insider risk/threat management concepts, tools, and best practices.
Experience developing and leading security or insider risk programs.
US Citizenship is required.
Strong analytical and investigative skills with the ability to identify and mitigate threats to the company and personnel.
Knowledge of relevant compliance requirements, particularly government regulations related to insider threat programs.
Excellent communication, collaboration, and leadership skills.
Proficiency in understanding and applying data analytics in an insider risk/threat management framework.

Nice To Haves

Strategic Thinking: Ability to anticipate and plan for potential risks while crafting long-term solutions.
Collaboration: Skilled at working with diverse teams to align program objectives with broader organizational goals.
Discretion and Integrity: Trusted to handle sensitive data and investigations ethically and in confidence.
Results-Oriented: Focused on achieving measurable improvements in reducing risk exposure.
Decision-Making: Strong ability to navigate complex situations and provide sound, proactive solutions.

Responsibilities

Management and enhancement of Amentum’s Insider Risk Program, including policies, procedures, and tools to safeguard sensitive information, systems, and assets.
Build a comprehensive framework for deterring, detecting, investigating, and mitigating insider risks.
Lead threat assessments and develop strategies to address potential risks posed by personnel with authorized access (e.g., intellectual property theft, sabotage, espionage, fraud, or unintentional data breaches).
Assess threats or concerning communication and develop a framework to integrate assessments into broader security management.
Partner with Cybersecurity to detect potential insider risk behaviors using appropriate tools and ensure alignment with privacy laws and ethical considerations.
Actively participate in investigations tied to insider risks or other threats and oversee reporting protocols.
Collaborate cross-functionally (e.g. IT, HR, Legal, Compliance, Security) to identify behavioral concerns/trends and intervention strategies for at-risk individuals, develop incident response plans, and coordinate cross-departmental responses to incidents.
Collaborate with government agencies, security organization and industry counterparts on insider risk issues.
Design and deliver insider risk awareness training programs for employees, contractors, and leadership on recognizing and addressing insider risk indicators and promoting a culture of vigilance.
Collaborate with regional Government Security counterparts to ensure compliance with applicable government requirements and serve as the company’s appointed Insider Threat Program Senior Official.
Develop metrics and reports to measure and communicate program effectiveness to senior leadership.