Insider Threat Program Manager

Join our team in this unique opportunity to engage with a large, complex entity that is integral to U.S. critical infrastructure and the global financial ecosystem.

As an Insider Threat Program Manager within the Global Security team, you'll lead the development and oversight of insider threat processes and controls, utilizing your expertise to enhance the firm's framework for identifying and mitigating internal threats. Collaborating with diverse partners across the company, including Cybersecurity, Technology, Risk Management & Compliance, Legal, Human Resources, and Regulatory Affairs, as well as external partners, you'll play a key role in safeguarding the organization. 

Job responsibilities 

• Lead the execution of strategic deliverables and manage day-to-day program activities to ensure seamless operations while strengthening the firm-wide control environment.
• Coordinate with individual stakeholders and working groups to ensure compliance with established standards and procedures.
• Utilize Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to track and report on insider risk mitigation progress, enhancing visibility and driving continuous improvement.
• Collect and disseminate information on notable insider events to inform risk management processes.
• Coordinate with business stakeholders and corporate partners to fulfill insider threat responsibilities, including annual assessments and risk management obligations.
• Ensure alignment with existing risk management processes and frameworks, actively interacting with oversight, risk management and controls functions to address potential modifications.
• Provide advisory support to stakeholders as they incorporate insider risks/threats into their risk assessment and management obligations.
• Advise firm-wide stakeholders and partners on targeted awareness and education; design and deliver training on insider risks and threats.
• Conduct external benchmarking of program activities, strategic priorities, initiatives, and metrics.
• Prepare program updates, including annual assessments, for presentation to the senior level leadership, committees, and relevant forums.
• Communicate complex problem sets clearly and succinctly to a diverse audience of stakeholders.

Required qualifications, capabilities and skills

• 8+ years of relevant work experience in program management, ideally supporting an insider risk/threat program or risk analysis.
• Minimum of an undergraduate degree
• Demonstrated expertise in strategic planning and successful execution of large-scale initiatives.
• Extensive knowledge of governance and risk management frameworks, including evaluating control environments and developing mitigation strategies as a solution to control gaps
• Demonstrated technical acumen and experience in cybersecurity architecture, controls, and operations.
• Knowledge of compliance, conduct, and operational risk management frameworks and processes; ability to anticipate and identify risks and effective mitigants.
• Understanding of security organization practices and operations (e.g., physical security, human threat detection, insider threat, behavior analytics, incident response).
• Adept at developing relationships with diverse stakeholders and senior executives; reputation for partnering across organizational lines to mitigate risks.
• Strong organizational, project management, and multi-tasking skills with demonstrated ability to manage expectations, drive ideas forward, and deliver results in a demanding environment.
• Excellent interpersonal skills, written and oral communication, analytical and problem-solving skills, experience with executive-level briefing.
• Experience conducting risk assessments and in-depth multi-source research on threat actors, tactics, techniques, and emerging trends to inform risk scenarios.

Preferred qualifications, capabilities and skills 

• Experience in or knowledge of the private sector, including but not limited to the financial industry.
• Insider Threat, Counterintelligence, analytical and/or security tradecraft training and certifications.
• Experience with data querying, analytical tools, and data visualization techniques.
• Master’s degree related to Intelligence Studies, Forensic Science, Security Studies, Computer Science, Cybersecurity, Data Analysis, or a related field.