Position Overview

We are seeking an experienced and proactive Senior Cybersecurity Analyst – DLP & Insider Risk to lead and enhance our enterprise insider threat defense, prevention, and response capabilities. In this role, you will be responsible for designing, deploying, and maintaining frameworks to detect, analyze, and mitigate risks posed by insider threats—including malicious, negligent, or compromised actors.

As a key member of our global cybersecurity organization, you will collaborate closely with

Cross-Functional Security Teams, Legal, HR, and IT to ensure sensitive data and critical

corporate assets remain safe and compliant.

Key Responsibilities

● Program Strategy & Governance:

○ Lead, mature, and optimize the global Insider Threat Program framework,

policies, and operational workflows.

○ Define and monitor key risk indicators (KRIs) and key performance indicators

(KPIs) related to insider risk.

○ Ensure alignment with global security standards, privacy laws, and regional

regulatory compliance requirements.

● Threat Detection & Behavioral Analysis:

○ Design, implement, and tune behavioral detection rules, risk-scoring models,

and monitoring strategies using UEBA (User and Entity Behavior Analytics),

SIEM, and DLP (Data Loss Prevention) tools.

○ Conduct complex threat hunting, anomaly detection, and deep-dive

investigations into potential insider risk incidents.

● Incident Response & Investigation:

○ Serve as the primary technical contact and expert for high-risk insider threat

investigations and escalation procedures.

○ Partner with Legal, Human Resources, Internal Audit, and Employee

Relations to conduct thorough, objective, and privacy-compliant forensic

reviews and risk assessments.

○ Prepare transparent,



concise executive-level reports and evidence summaries for

leadership and legal counsel.

● Collaboration & Stakeholder Management:

○ Educate and advise stakeholders across different regions on insider threat

trends, mitigation strategies, and best practices.

○ Collaborate with technical teams (Security Operations, Identity & Access

Management, Cloud Security) to strengthen access controls and reduce

administrative exposure.

Required Qualifications & Experience

● Experience: 5–8 years of direct domain experience in cybersecurity, user behavioral

analytics, data loss prevention, or insider threat management.

● Technical Expertise:

○ Deep technical hands-on experience with UEBA/SIEM platforms (e.g.,

Exabeam, Securonix, Splunk Enterprise Security, Microsoft Sentinel) and

DLP technologies (e.g., Symantec, Forcepoint, Microsoft Purview).

○ Solid understanding of digital forensics techniques, log analysis, user access

controls, and data protection practices.

● Analytical Skills: Strong analytical capabilities to synthesize disparate logs, user

activity data, and behavioral cues into actionable risk assessments.

● Communication: Excellent verbal and written communication skills with proven

experience presenting technical findings to non-technical executive stakeholders.

● Remote Collaboration: Self-motivated and capable of operating effectively in a fully

remote, multi-timezone environment across Malaysia and India.

Preferred Qualifications / Certifications

● Industry-recognized security certifications such as CISM, CISSP, CISA, CCFP,

GCFA, GNFA, or specialized Insider Threat certifications (e.g., CERT Insider Threat

Vulnerability Assessor/Manager).

● Prior experience handling cross-border data privacy regulations (e.g., PDPA, GDPR)

during security investigations

📌 Senior Cybersecurity Analyst DLP & Insider Risk (India)
🏢 Yodatech
📍 India