Vice President – Insider Threat Investigations Lead

Job information:

• Functional title - Insider Threat Investigations Lead
• Department - IT Security
• Corporate level - Vice President
• Report to - Director
• Location - London, onsite 2 days per week

Job purpose

CLS is seeking a highly motivated, and skilled Vice President - Insider Threat Investigations Lead to join our Insider Threat Team. The role will be located in London. The position will report to the Director of Insider Threat and will participate in the development, implementation, and continuous improvement of a new Insider Threat team. This role involves the identification, prevention, and response to risks posed by individuals with authorized access to organizational assets, including employees, contractors, and third-party vendors. The position will require collaboration with cross-functional teams to mitigate the risks of malicious, negligent, or unintentional insider actions that could lead to security breaches, data loss, or reputational damage.  This role will also be responsible for building relationships with other organizational partners. The position requires strong investigative skills.

This position requires someone with an analytical mind and data analysis skills, a quick learner, the ability to propose, and execute program initiative’s/improvements, and collaborate with a wide range of key stakeholders.

Job Description

• Participate in the execution of the insider threat program, including the development of tools, standards, procedures, and processes to detect, prevent, and respond to insider threats
• Utilize advanced detection tools, behavioral analytics, and security monitoring systems
• Drive continuous improvement by integrating lessons learned, industry best practices, and emerging threat intelligence
• Collaborate with stakeholders across the firm to evaluate and address potential insider risks across systems, networks, and organizational processes
• Manage investigations of suspected insider threat incidents, ensuring that investigations are thorough, timely, and conducted in accordance with legal and regulatory requirements
• Produce reports on insider threat risks, incidents, and mitigation efforts for executives to aid in their decision making
• Work with the intelligence team to develop threat modeling deliverables

 Experience

• 8+ years of experience in information security, preferable in Investigations, Analysis, Security Operations, Incident Response, or Threat Intelligence roles
• Experience with insider threat detection tools (UEBA, DLP, SIEM) and knowledge of advanced threat intelligence techniques
• 3+ years of experience in Insider Threat or equivalent.
• Knowledge of fundamentals of threat actors’ TTPs and MITRE ATT&CK Framework
• Understanding of security frameworks, incident response, and risk management practice
• Knowledge of relevant legal and regulatory considerations, including privacy laws and data protection requirements
• Excellent interpersonal and relationship management skills

Qualifications/Certifications

• Bachelor’s Degree in Cybersecurity studies, Information Systems, Computer Science, Business Analytics, Intelligence Studies, Criminology, or related discipline
• Experience or the ability to operate security monitoring and analytical tools (e.g.  UEBA, DLP, SIEM) is highly preferred
• Expertise in managing complex investigations, coordinating with multiple departments, and resolving security incidents efficiently
• Security certification which demonstrates knowledge of cybersecurity, defense, vulnerabilities, data and operating system security e.g.  SANS, CERT ITPM, CISA.
• Experience with threat intelligence and SOC/CIRT interaction
• Experience in handling sensitive information
• Strong written and verbal communication skills
• Ability to work on-site at least twice a week in London and/or participate in local intelligence sharing groups

Desired Skills

• Financial sector experience