09 Aug
|
Global Payments
|
Pune
09 Aug
Global Payments
Pune
Description:
- Manage and direct the day-to-day activities of a multidisciplinary function that is responsible for detecting, monitoring, investigating, and managing insider-driven risk.
- Maintain the Global Payments Insider Threat Program to include its surrounding framework, policies, plans, and standard operating procedures
- Drive the Insider Threat Program leveraging investigative data to enhance policy, tool selection, data efficacy, high fidelity alerting, detection creation, and enhance investigative practice.
- Review investigative reporting for high fidelity results and appropriate business recommendation
- Mentor and oversee analysts on triaging the risk events, communications and remediation steps.
- Identify insider threat indicators and use cases to develop new detections and improve detection accuracy.
- Perform Threat-modeling & risk analysis based on direct interaction with investigators, analysts, and available data for all business segments
- Conduct benchmarking of program activities, strategic priorities, initiatives, and metrics.
- Identify opportunities of automation and improving operations efficiency.
- Develop risk documentation and executive reporting
- Develop and deliver specialized training on identifying indicators of Insider Threats and response tactics.
- Conduct program maturity assessments and assist in developing program roadmap
- Reduce high-impact insider risk related incidents
Minimum Qualifications:
- Bachelor’s Degree in accounting, cyber security, intelligence studies, criminal justice, or related degree
- Cyber security and Fraud investigative experience with minimum of 3-5 years of experience in managing a team.
- Excellent verbal and written skills.
- Experience working in highly regulated environments leveraging User and Entity Behavior Analytics (UEBA), User Activity Monitoring(UAM), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles.
- Knowledge of workforce privacy, employment law considerations, computer forensics, incident response, threat-informed defense approaches, Insider Threat Matrix, MITRE ATT&CK; framework, and cyber security principles.
- Strong analytical ability to integrate data sets from multiple sources to build the risk profile.
- Understand insider tactics, techniques and procedures(TTP) to aid in discovery, analysis
- High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.
Preferred Qualifications:
- Demonstrated experience in leading insider Threat investigations, Fraud Program Operations, or Security Operations for eight years or more.
- Experience working cross-functionally with HR, Legal, Ethics, Privacy, or Executive Stakeholders
- Experience handling confidential investigations or high-risk employee matters
- Track record of acting with integrity, taking pride in work, seeking to excel, and being curious and adaptable.
- Certifications- CERT ITPM, CFE, GCFA, CFCE, CFI, CFSR, or Similar Credentials.
- Experience making remediation recommendations based on industry practice surrounding PCI, SOX, PHI, PII, GDPR, GLBA, and NIST CyberSecurity Framework.
📌 Insider Threat Program Manager (Pune)
🏢 Global Payments
📍 Pune