Cyber Risk Management Master

Responsibilities

• Program Uplift-Develop, implement, and continuously mature insider risk policies, procedures, and controls aligned with regulatory requirements and industry best practices.

• Monitor, analyze, and assess user behavior and activity data using UEBA tools and other analytics platforms to identify potential insider threat indicators, anomalies, and emerging risk patterns.

• Lead and coordinate investigations of suspected insider risk incidents, including evidence collection, documentation of findings, and recommendation of remediation or escalation actions.

• Collaborate closely with HR, Legal, Corporate Security, Technology, and line-of-business leadership to investigate concerning user conduct and drive appropriate, timely responses.

• Provide risk assessment and advisory services to business units regarding insider threat exposures, vulnerability gaps, and mitigation strategies.

• Prepare reports, program dashboards, and executive-level metrics demonstrating program effectiveness for senior management and regulatory bodies.

• Design and facilitate training and awareness initiatives that promote a culture of security, compliance, and shared responsibility across the firm.

• Maintain thorough documentation of insider risk cases, metrics, and program activities in compliance with records management and legal hold requirements.

Required Qualifications

• Bachelor's degree in Information Security, Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field — OR equivalent professional experience in military, law enforcement, or government service

• Minimum 8 years of experience in insider risk management, security investigations, compliance, behavioral analysis, or a closely related domain

• Demonstrated high level of integrity with a proven track record of maintaining strict confidentiality and handling sensitive matters with discretion

• Strong understanding of insider threat tactics, adversary behaviors (TTPs), and common risk indicators within financial services environments

• Solid knowledge of behavioral analysis techniques, user and entity behavior analytics (UEBA), and investigative methodologies

• Working knowledge of relevant regulatory frameworks and legal requirements, including SOX, GLBA, FINRA, and SEC regulations

• Strong analytical mindset with excellent critical thinking, research, problem-solving, and data synthesis skills focused on threat identification and risk mitigation

• Proven ability to obtain, analyze, and synthesize information from multiple sources — including user activity data, system logs, and witness interviews

• Ability to communicate complex findings and actionable insights to diverse audiences, from frontline managers to C-suite executives

• Demonstrated ability to influence and build trusted relationships with HR, Legal, Technology, and executive leadership — both internal and external partners

• Highly self-motivated with sound judgment, strong initiative, and the ability to work independently on sensitive matters

• Proven ability to manage competing priorities across multiple complex, concurrent investigations and program initiatives

• Excellent verbal, written, and interpersonal communication skills with the highest level of professionalism

• Strong proficiency in Microsoft Office (Excel, PowerPoint, Word, Visio) and experience with data analysis and investigative reporting tools

Preferred Qualifications

• Hands-on experience with Data Loss Prevention (DLP) platforms and tools

• Experience with Microsoft Purview, including Insider Risk Management, eDiscovery, and/or Communications Compliance modules

• Background in law enforcement, military service, or government investigations

• Relevant certifications such as CISSP, CISM, CFE, or equivalent