Cybersecurity Insider Threat, Director

About the role

The Director of Cybersecurity Insider Threat is a critical part of the Cybersecurity Fusion Center (CSFC) within the Chief Information Security Office (CISO). This role is essential in reducing risk to the firm, with a significant focus on leveraging Artificial Intelligence (AI) to address the new and evolving threat landscape.

Responsibilities

• Define and execute the strategic vision for the enterprise Insider Threat program, aligned with organizational risk tolerance and business objectives.

• Provide strong leadership, strategic direction, and development for the insider threat team.

• Drive the strategy for leveraging AI and advanced data analytics to enhance the detection, analysis, and mitigation of insider threats, with a specific focus on addressing the new risks associated with AI.

• Lead the design, refinement, and implementation of a new, data-centric process to better protect the firm against the risk of insiders, ensuring the program remains adaptive to emerging threats.

• Design, mature, and sustain an enterprise insider threat program, including detection, triage, response, and mitigation capabilities. Integrate behavioral, technical, and contextual indicators to enable a holistic and risk-based approach.

• Serve as a trusted advisor on insider threat to senior leadership, legal, HR, compliance, risk, cyber, and other partners. Engage with industry peers, forums, and intelligence-sharing groups to benchmark programs, identify emerging trends, and adopt leading practices.

• Contribute to enterprise governance, risk management, and control frameworks related to insider threat. Ensure appropriate oversight, metrics, and reporting mechanisms are in place to demonstrate program effectiveness and risk reduction.

Qualifications

• 15+ years' experience in cybersecurity, insider threat, or relevant experience as detailed below with significant experience leading investigative, intelligence, or insider threat functions within an enterprise corporate, government, and regulated environment.

• Proven track record of defining and executing strategic vision for a major security program. 15+ years' experience in people management with multiple direct reports. Demonstrated success in building, leading, and mentoring high-performing, multidisciplinary teams.

• Strong understanding of the insider threat landscape, attack vectors, and mitigation strategies. Proven experience designing, implementing, or maturing insider threat detection and mitigation programs. A strong focus on data and familiarity with leveraging AI/ML for security solutions is required.

• Strong ability to synthesize complex and sensitive information into actionable mitigation strategies and executive-level communications. Experience engaging senior stakeholders and influencing outcomes through collaboration and credible risk-based insights.

• Ability to work effectively and lead teams in a fast-paced, high-pressure, global environment.