Insider Threat Investigator

Team Overview

The Global Insider Threat Program (GITP) protects TransUnion data, intellectual property, and information systems from insider risks through proactive monitoring, data protection, risk detection, and investigative capabilities. As part of the Cyber Defense organization, GITP partners closely with Human Resources, Legal, Compliance, Employee Relations, Information Security, and business leaders to identify, investigate, and mitigate insider threats while supporting regulatory, privacy, and business protection objectives globally.

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Responsibilities

• Independently lead complex insider threat investigations from intake through closure.
• Analyze technical, behavioral, and business context to identify insider risk, determine root cause, and assess organizational impact.
• Conduct investigative interviews with witnesses, managers, and investigation subjects.
• Collect, preserve, correlate, and analyze evidence from endpoint, network, cloud, identity, and collaboration platforms.
• Prepare executive ready investigative reports and recommendations.
• Partner with Human Resources, Employee Relations, Legal, Compliance, and Cybersecurity stakeholders.
• Identify trends, recurring risk indicators, and control gaps and recommend improvements.
• Support development of investigative methodologies, playbooks, and standards.
• Contribute to strategic initiatives that enhance global insider threat program.

Requirements

• 5+ years of relevant investigative experience with a Bachelor degree or equivalent experience and certifications.
• Demonstrated experience leading sensitive investigations and a strong understanding of investigative methodologies and evidence handling, paired with Data Loss Prevention technologies and workflows.
• Experience collaborating with HR, Legal, Employee Relations, and Compliance.
• Microsoft Purview: eDiscovery, Insider Risk Management.
• Cybersecurity Capabilities: EDR, CASB, SIEM.

Preferred Skills

• Corporate Insider Threat Program experience.
• Large global enterprise investigation experience.
• Experience building playbooks, metrics, and maturity initiatives.
• Insider Threat mitigation platforms such as Securonix, Exabeam, Teramind, Proofpoint ITM.
• CFE, GCFA, CISSP, or similar certifications.

Benefits

For Your Health: Enjoy day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options. Spousal, domestic partner, and other eligible dependent coverage is available on select plans. Choose tax-advantaged HSA and FSA accounts to make everyday care more affordable.

For Your Protection: Company-paid basic life and AD&D, optional voluntary life and AD&D for you and your family, and short- and long-term disability. You can also opt into a legal plan, pet insurance, and travel accident coverage.

For Your Family: Adoption assistance, fertility planning coverage, caregiver support, Dependent Care FSA with possibility of an employer match, a complimentary Care@Work membership, and up to 12 weeks of paid parental leave with eligibility for a gradual return.

For Your Future: 401(k) with employer match and Employee Stock Purchase Plan (ESPP). Financial wellness resources, career coaching, and optional long-term care insurance.

For You: Tuition reimbursement, flexible time off for exempt employees or paid time off for nonexempt employees, up to 12 paid holidays per year, commuter benefits, employee discounts, charitable gift matching, and paid volunteer time off, plus corporate volunteer events.

For Your Wellness: 24/7 support including professional therapy, coaching, and emotional well-being programs alongside guided meditation and resources that support physical, mental, social, and financial wellness.

Pay

The U.S. base salary range for this position is $90,000.00 - $150,000 annually. Actual compensation is based on careful consideration of additional factors such as education, training, work experience, job-related skill set, location, and industry knowledge, as well as the scope and responsibilities of the position and market considerations. Regular, full-time non-sales positions may be eligible to participate in TransUnion’s annual bonus plan. Certain positions may be also eligible for long-term incentives and other payments based on applicable company guidance and plan documents.