Senior Insider & Data Risk Analyst

Owns insider-risk investigations and advances data-loss prevention capabilities across people, devices, identities, and data movement. The role requires 4+ years of security investigations or DLP experience, strong case-management judgment, and familiarity with governance frameworks and SIEM tooling.

About the job

Responsibilities

Own insider risk investigations from triage through closure, including case timelines, containment, escalation, documented determinations, and lessons learned.
Mature the Insider Risk Management Program through case management processes, risk tiering, and repeatable workflows.
Operate and tune Data Loss Prevention tooling across SaaS environments and endpoints, refining rulesets to improve signal quality and reduce false positives.
Mature data classification and align DLP controls to sensitivity levels.
Investigate potential data exfiltration, misuse, and policy violations; build and tune detections and monitoring.
Investigate misuse and exfiltration risk across source code, Google, AWS, Azure, third-party applications, Slack, and trading and platform system access.
Partner with People/HR, Legal, Compliance, and IT on sensitive cases involving departures, policy violations, and data mishandling.
Assess risk from unauthorized AI or agentic tooling and sensitive-data exposure through approved and unsanctioned AI tools.
Use agentic AI to mature the insider risk program.
Lead insider and data risk assessments and maintain risk registers.
Support internal and external audits and regulatory requirements.
Contribute insider risk and data-handling content to security awareness and training programs.
Serve as the Security team's insider risk escalation point and mentor others on investigations and casework.
Monitor developments in insider risk, data protection, privacy, and financial-services regulation.

Requirements

4+ years of experience in insider risk, DLP operations, digital forensics, or security investigations, including hands-on case management involving sensitive personnel matters.
Experience leading investigations and case management with discretion, integrity, and sound judgment.
Hands-on experience operating DLP in SaaS and endpoint environments and tuning rules to improve signal quality.
Experience with workflow automation, AI, or SOAR platforms for alert triage and case orchestration.
Solid understanding of data classification and data governance.
Working knowledge of SIEM and log analysis, such as ELK/Elastic or Splunk.
Familiarity with NIST CSF, ISO 27001, SOC 2, GDPR, and APPI.
Strong written communication skills, including investigation reports, case documentation, and executive summaries.
High integrity and discretion when handling confidential and sensitive information.
Ability to work across People/HR, Legal, Compliance, Engineering, and IT.

Nice-to-Haves

Academic, personal, or professional experience in fintech, financial services, or trading platforms.
Digital forensics or eDiscovery experience.
Experience with UEBA or insider risk detection platforms.
Scripting or automation for detections and data analysis, such as Python or SQL.
Experience with major cloud platforms.
Experience supporting or observing SOC 2, ISO 27001, or regulatory audits.
Certifications such as GCFA, GCFE, CISSP, CISM, CIPP, CFE, or similar.
Interest in AI-related data risk and using AI tools to work more efficiently.
Familiarity with SEC/FINRA expectations, broker-dealer controls, and multi-jurisdiction privacy requirements.
Experience in security operations or incident response.

Compensation and Benefits

Competitive salary and stock options.
Health benefits.
One-time $500 new-hire home-office setup benefit.
$150 per month stipend via a Brex Card.

Skills

Data Loss Prevention, Insider Risk Management, Digital Forensics, Security Investigations, SIEM, Splunk, Elastic, Python, SQL, Soar, Data Classification, Data Governance, AWS, Azure, Nist Csf