Cyber Risk Management Master

Responsibilities 

• Program Uplift- Develop, implement, and continuously mature insider risk policies, procedures, and controls aligned with regulatory requirements and industry best practices. 

• Monitor, analyze, and assess user behavior and activity data using UEBA tools and other analytics platforms to identify potential insider threat indicators, anomalies, and emerging risk patterns. 

• Lead and coordinate investigations of suspected insider risk incidents, including evidence collection, documentation of findings, and recommendation of remediation or escalation actions. 

• Collaborate closely with HR, Legal, Corporate Security, Technology, and line-of-business leadership to investigate concerning user conduct and drive appropriate, timely responses. 

• Provide risk assessment and advisory services to business units regarding insider threat exposures, vulnerability gaps, and mitigation strategies. 

• Prepare reports, program dashboards, and executive-level metrics demonstrating program effectiveness for senior management and regulatory bodies. 

• Design and facilitate training and awareness initiatives that promote a culture of security, compliance, and shared responsibility across the firm. 

• Maintain thorough documentation of insider risk cases, metrics, and program activities in compliance with records management and legal hold requirements. 

Required Qualifications 

• Bachelor's degree in Information Security, Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field — OR equivalent professional experience in military, law enforcement, or government service 

• Minimum 8 years of experience in insider risk management, security investigations, compliance, behavioral analysis, or a closely related domain 

• Demonstrated high level of integrity with a proven track record of maintaining strict confidentiality and handling sensitive matters with discretion 

• Strong understanding of insider threat tactics, adversary behaviors (TTPs), and common risk indicators within financial services environments 

• Solid knowledge of behavioral analysis techniques, user and entity behavior analytics (UEBA), and investigative methodologies 

• Working knowledge of relevant regulatory frameworks and legal requirements, including SOX, GLBA, FINRA, and SEC regulations 

• Strong analytical mindset with excellent critical thinking, research, problem-solving, and data synthesis skills focused on threat identification and risk mitigation 

• Proven ability to obtain, analyze, and synthesize information from multiple sources — including user activity data, system logs, and witness interviews 

• Ability to communicate complex findings and actionable insights to diverse audiences, from frontline managers to C-suite executives 

• Demonstrated ability to influence and build trusted relationships with HR, Legal, Technology, and executive leadership — both internal and external partners 

• Highly self-motivated with sound judgment, strong initiative, and the ability to work independently on sensitive matters 

• Proven ability to manage competing priorities across multiple complex, concurrent investigations and program initiatives 

• Excellent verbal, written, and interpersonal communication skills with the highest level of professionalism 

• Strong proficiency in Microsoft Office (Excel, PowerPoint, Word, Visio) and experience with data analysis and investigative reporting tools 

Preferred Qualifications 

• Hands-on experience with Data Loss Prevention (DLP) platforms and tools 

• Experience with Microsoft Purview, including Insider Risk Management, eDiscovery, and/or Communications Compliance modules 

• Background in law enforcement, military service, or government investigations 

• Relevant certifications such as CISSP, CISM, CFE, or equivalent