Insider Threat Program Manager

Responsibilities

• Manage and direct the day-to-day activities of a multidisciplinary function that is responsible for detecting, monitoring, investigating, and managing insider-driven risk.
• Maintain the Global Payments Insider Threat Program to include its surrounding framework, policies, plans, and standard operating procedures
• Drive the Insider Threat Program leveraging investigative data to enhance policy, tool selection, data efficacy, high fidelity alerting, detection creation, and enhance investigative practice.
• Review investigative reporting for high fidelity results and appropriate business recommendation
• Mentor and oversee analysts on triaging the risk events, communications and remediation steps.
• Identify insider threat indicators and use cases to develop new detections and improve detection accuracy.
• Perform Threat-modeling risk analysis based on direct interaction with investigators, analysts, and available data for all business segments
• Conduct benchmarking of program activities, strategic priorities, initiatives, and metrics.
• Identify opportunities of automation and improving operations efficiency.
• Develop risk documentation and executive reporting
• Develop and deliver specialized training on identifying indicators of Insider Threats and response tactics.
• Conduct program maturity assessments and assist in developing program roadmap
• Reduce high-impact insider risk related incidents

Minimum Qualifications

• Bachelor s Degree in accounting, cyber security, intelligence studies, criminal justice, or related degree
• Cyber security and Fraud investigative experience with minimum of 3-5 years of experience in managing a team.
• Excellent verbal and written skills.
• Experience working in highly regulated environments leveraging User and Entity Behavior Analytics (UEBA), User Activity Monitoring(UAM), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles.
• Knowledge of workforce privacy, employment law considerations, computer forensics, incident response, threat-informed defense approaches, Insider Threat Matrix, MITRE ATTCK framework, and cyber security principles.
• Strong analytical ability to integrate data sets from multiple sources to build the risk profile.
• Understand insider tactics, techniques and procedures(TTP) to aid in discovery, analysis
• High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.

Preferred Qualifications

• Demonstrated experience in leading insider Threat investigations, Fraud Program Operations, or Security Operations for eight years or more.
• Experience working cross-functionally with HR, Legal, Ethics, Privacy, or Executive Stakeholders
• Experience handling confidential investigations or high-risk employee matters
• Track record of acting with integrity, taking pride in work, seeking to excel, and being curious and flexible.
• Certifications- CERT ITPM, CFE, GCFA, CFCE, CFI, CFSR, or Similar Credentials.
• Experience making remediation recommendations based on industry practice surrounding PCI, SOX, PHI, PII, GDPR, GLBA, and NIST CyberSecurity Framework.

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.