Senior Manager for Insider Threat

Key Responsibilities

• Lead the design, implementation, and ongoing maturation of the enterprise Insider Threat Program
• Operationalize capabilities for user activity monitoring, behavioral analytics, and data loss prevention (DLP)
• Oversee detection, investigation, and response to insider threat incidents, including data exfiltration, misuse of access, and policy violations
• Partner with HR, Legal, Compliance, Privacy, and IT to ensure investigations are conducted appropriately and in alignment with legal and regulatory requirements
• Define and maintain insider threat policies, governance frameworks, and escalation procedures
• Implement and optimize tools supporting insider risk detection (e.g., UEBA, DLP, endpoint monitoring)
• Establish metrics, reporting, and dashboards to provide leadership visibility into insider risk trends and program effectiveness
• Conduct risk assessments related to privileged access, sensitive roles, and critical business processes
• Drive awareness and training initiatives to reduce unintentional insider risk

Leadership & Collaboration

• Lead and develop a team of analysts and investigators focused on insider risk detection and response
• Drive cross-functional collaboration across Cybersecurity Operations, IT, HR, Legal, Compliance, and Business Units
• Influence stakeholders without direct authority to ensure alignment on risk mitigation strategies
• Serve as a subject matter expert and escalation point for complex insider threat cases

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (Master’s preferred)
• 8–12+ years of experience in cybersecurity, with direct experience in insider threat, investigations, or security operations
• Strong knowledge of insider risk frameworks, behavioral analytics, and monitoring technologies (e.g., UEBA, DLP, SIEM)
• Experience working in global, highly regulated environments
• Familiarity with legal and privacy considerations related to employee monitoring and investigations
• Strong analytical, investigative, and problem-solving skills
• Excellent communication skills with the ability to convey complex issues to technical and non-technical audiences

Preferred Experience

• Experience in manufacturing or global enterprise environments
• Background in digital forensics, fraud investigations, or counterintelligence
• Certifications such as CISSP, CISM, GCFA, or similar

Key Success Metrics

• Reduction in insider-related incidents and data loss events
• Improved detection and response times for insider threat cases
• Adoption and effectiveness of insider threat controls and monitoring
• Strength of cross-functional partnerships and program maturity