Insider Risk Analyst

Job Purpose (Job Summary): The Analyst, Insider Risk works within the Global Security Department to triage and review incidents of potential data loss. The Analyst responds to alerts triggered by the Data Loss Prevention tool on a daily basis resolving those determined to be false positives and escalating those appearing to be valid. Primary software tools include Microsoft Data Loss Prevention’s tool including Defender and Purview. Additional responsibilities include interaction with Cyber Defense, Business Security Officers, and other business partners to resolve identified data loss incidents. Additionally, the Analyst, Insider Risk conducts enhanced monitoring of departing employees and those determined to be high risk.

Key Responsibilities / Duties:

• Responsible for reviewing data loss incidents utilizing Microsoft’s DLP.
• Thoroughly document and maintain administrative logs related to the DLP review process.
• Responds to ad hoc requests from other business partners to review employee activity in DLP.
• Reviewing DLP incidents to resolve those determined to be false positives and escalating valid incidents.

Work Experience / Knowledge:

• Multiple years of experience with data loss prevention tools, including Microsoft Defender.
• Strong knowledge and technical proficiency with Information Security software
• Prefer knowledge of SIEM tools, to include QRada.
• Understanding of or experience working in an Insider Risk program

Skills / Other Personal Attributes Required:

• Excellent communication skills
• Responsible and good moral character; maintain utmost integrity while in a position of trust.
• Ability to prioritize and work under pressure.
• Passion for excellence through strong execution.
• Collaborates and builds trusting relationships.
• Entrepreneurial spirit that promotes innovation and continuous improvement.
• Thinks ahead and makes fact-based decisions.

Formal Education:

• Prefer Bachelor’s degree in a technical field such as Computer Science, Management of Information Systems, or Digital Forensics
• Certification or training related to Information Security desired
• Certifications or training related to Microsoft are preferred