Insider Threat Program Manager
Global Payments Inc.
- Location
- Pune/Pimpri-Chinchwad Area
- Job type
- Full-time
Required skills
- SIEM
- accounting
- cross-functionally
- ethics
- incident response
- SOX
About the role
Global Payments Inc.
Website:
globalpayments.com
Job details:
Description:
- Manage and direct the day-to-day activities of a multidisciplinary function that is responsible for detecting, monitoring, investigating, and managing insider-driven risk.
- Maintain the Global Payments Insider Threat Program to include its surrounding framework, policies, plans, and standard operating procedures
- Drive the Insider Threat Program leveraging investigative data to enhance policy, tool selection, data efficacy, high fidelity alerting, detection creation, and enhance investigative practice.
- Review investigative reporting for high fidelity results and appropriate business recommendation
- Mentor and oversee analysts on triaging the risk events, communications and remediation steps.
- Identify insider threat indicators and use cases to develop new detections and improve detection accuracy.
- Perform Threat-modeling & risk analysis based on direct interaction with investigators, analysts, and available data for all business segments
- Conduct benchmarking of program activities, strategic priorities, initiatives, and metrics.
- Identify opportunities of automation and improving operations efficiency.
- Develop risk documentation and executive reporting
- Develop and deliver specialized training on identifying indicators of Insider Threats and response tactics.
- Conduct program maturity assessments and assist in developing program roadmap
- Reduce high-impact insider risk related incidents
Minimum Qualifications:
- Bachelor’s Degree in accounting, cyber security, intelligence studies, criminal justice, or related degree
- Cyber security and Fraud investigative experience with minimum of 3-5 years of experience in managing a team.
- Excellent verbal and written skills.
- Experience working in highly regulated environments leveraging User and Entity Behavior Analytics (UEBA), User Activity Monitoring(UAM), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles.
- Knowledge of workforce privacy, employment law considerations, computer forensics, incident response, threat-informed defense approaches, Insider Threat Matrix, MITRE ATT&CK framework, and cyber security principles.
- Strong analytical ability to integrate data sets from multiple sources to build the risk profile.
- Understand insider tactics, techniques and procedures(TTP) to aid in discovery, analysis
- High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.
Preferred Qualifications:
- Demonstrated experience in leading insider Threat investigations, Fraud Program Operations, or Security Operations for eight years or more.
- Experience working cross-functionally with HR, Legal, Ethics, Privacy, or Executive Stakeholders
- Experience handling confidential investigations or high-risk employee matters
- Track record of acting with integrity, taking pride in work, seeking to excel, and being curious and flexible.
- Certifications- CERT ITPM, CFE, GCFA, CFCE, CFI, CFSR, or Similar Credentials.
- Experience making remediation recommendations based on industry practice surrounding PCI, SOX, PHI, PII, GDPR, GLBA, and NIST CyberSecurity Framework.
Click on Apply to know more.
This page is fully interactive when JavaScript is enabled. Please enable JavaScript to apply or browse related roles.
