Insider Threat Program Manager

Description:

• Manage and direct the day-to-day activities of a multidisciplinary function  that is responsible for detecting, monitoring, investigating, and managing insider-driven risk.

• Maintain the Global Payments Insider Threat Program to include its surrounding framework, policies, plans, and standard operating procedures

• Drive the Insider Threat Program leveraging investigative data to enhance policy, tool selection, data efficacy, high fidelity alerting, detection creation, and enhance investigative practice.

• Review investigative reporting for high fidelity results and appropriate business recommendation

• Mentor and oversee analysts on triaging the risk events, communications and remediation steps.

• Identify insider threat indicators and use cases to develop new detections and improve detection accuracy.

• Perform Threat-modeling & risk analysis based on direct interaction with investigators, analysts, and available data for all business segments 

• Conduct benchmarking of program activities, strategic priorities, initiatives, and metrics.

• Identify opportunities of automation and improving operations efficiency.

• Develop risk documentation and executive reporting

• Develop and deliver specialized training on identifying indicators of Insider Threats and response tactics.

• Conduct program maturity assessments and assist in developing program roadmap

• Reduce high-impact insider risk related incidents

Minimum Qualifications:

• Bachelor’s Degree in accounting, cyber security, intelligence studies,  criminal justice, or related degree

• Cyber security and Fraud investigative experience with minimum of 3-5 years of experience in managing a team.

• Excellent verbal and written skills.

• Experience working in highly regulated environments leveraging User and Entity Behavior Analytics (UEBA), User Activity Monitoring(UAM), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles.

• Knowledge of workforce privacy, employment law considerations, computer forensics, incident response, threat-informed defense approaches, Insider Threat Matrix,  MITRE ATT&CK framework, and cyber security principles.

• Strong analytical ability to integrate data sets from multiple sources to build the risk profile.

• Understand insider tactics, techniques and procedures(TTP) to aid in discovery, analysis

• High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.

Preferred Qualifications:

• Demonstrated experience in leading insider Threat investigations, Fraud Program Operations, or Security Operations for eight years or more.

• Experience working cross-functionally with HR, Legal, Ethics, Privacy, or  Executive Stakeholders

• Experience handling confidential investigations or high-risk employee matters

• Track record of acting with integrity, taking pride in work, seeking to excel, and being curious and flexible.

• Certifications- CERT ITPM, CFE, GCFA, CFCE, CFI, CFSR, or Similar Credentials.

• Experience making remediation recommendations based on industry practice surrounding PCI, SOX, PHI, PII, GDPR, GLBA, and NIST CyberSecurity Framework.