Information Security. Sr. Insider Risk Analyst

GENERAL SUMMARY

Our Information Security Team is responsible for identifying potential threats against the Bank and its workforce from internal and external threat actors and developing strategies to mitigate those threats to protect the Banks reputation, workforce, clients, and assets. The Insider Risk Analyst supports the Insider Risk Program by monitoring and triaging insider-risk alerts, conducting multi-source analysis to determine context and risk, and documenting findings for appropriate escalation.

Additionally, the Insider Risk Analyst will assist in assessing exfiltration paths, tuning security tools and policies, and providing Information Security training and awareness to the organization. This role partners closely with Human Resources, Legal, other Information Security teams, and Information Technology to coordinate investigations, recommend mitigation actions, and help ensure activities are performed in accordance with data privacy, legal, and regulatory requirements.

• Lead triage of insider-risk alerts generated by monitoring use cases and tools; validate activity, gather context, and determine appropriate disposition in accordance with approved procedures.
• Respond to DLP alerts, monitor DLP consoles and analyze security events to identify potential data loss incidents.
• Lead in-depth investigations of suspected insider threat incidents, including unauthorized access, data exfiltration, and policy violations.
• Regularly review and fine‑tune DLP and UEBA rules/policies to reduce false positives and improve detection accuracy.
• Develop and implement insider threat detection use cases, alert rules, and incident response playbooks.
• Assess potential insider threats by evaluating the risks associated with users, data, and systems.
• Prepare clear case documentation and facilitate timely escalation or referral to investigators, HR, Legal, or other SMEs when thresholds are met; track outcomes and support coordination of mitigation actions.
• Lead interviews with the business units and monitor external intelligence sources for notable insider-risk indicators and emerging tactics; contribute to analysis of trends to inform detection tuning and response playbooks.
• Create and advocate for team member training and awareness on cybersecurity risks and best practices; design and track phishing simulation campaigns.
• Support program governance by authoring documentation (e.g., procedures, roles and responsibilities, and control evidence) and by adhering to the established control environment.
• Collaborate with stakeholders across the Bank and, as applicable, with external partners to stay abreast of industry trends and best practices in insider-risk monitoring, investigations, and privacy-aligned analytics.

Education: Undergraduate degree in Intelligence Studies, Forensic Science, Security Studies, Computer Science, Cybersecurity, Data Analysis or a related field or equivalent experience.

Behavioral Science / Behavioral Analysis / Behavioral Threat Assessment: experience or training preferred.

• Experience: Minimum 5+ years of work experience supporting insider threat/insider risk, investigations, security operations, fraud, or risk analysis.
• Preferred experience in or knowledge of financial industry.
• Experience in or knowledge of fraud.
• Preferred experience with User Activity Monitoring (UAM), User Behavior Analytics (UBA) principles and tools, rule and policy engines, other insider threat technical solutions and data analytics platforms.
• Preferred experience supporting an insider threat/risk program or investigative team by assessing complex events, building narratives from multiple data sources, and recommending mitigation actions in coordination with cross‑disciplinary partners.
• Preferred experience conducting risk assessments and in‑depth multi‑source research on threat actors, tactics, techniques, and emerging trends to inform risk scenarios, evaluate control environment and develop mitigation strategies.

• Demonstrates the ability to work effectively with a diverse range of stakeholders across various levels of the organization.
• Applies foundational elicitation skills,…