Cyber Security Insider Threat Lead

Company: Santander Holdings USA Inc
Location: Plymouth
Posted on: October 11, 2020

Job Description:

Cyber Security Insider Threat Lead  -  2003215  Description  This position will report to the Director, Cyber Threat Intelligence and Insider Threat. This role will support the team responsible for detecting, mitigating and investigating insider threats, including the safeguarding of sensitive information from exploitation, compromise or other unauthorized disclosure. Individual in this role will work closely with Cybersecurity Operations, Human Resources, Privacy, Fraud and other lines of business to mature the Insider Threat capability. The ideal candidate should have prior experience in Insider Threat. Key responsibilities include: Assist in developing and prioritizing key capability objectives for the function including detecting hidden signs of internal threat, sabotage, theft of sensitive information and fraud Define protection and detection rules for data loss prevention (DLP) tools Perform day to day data loss prevention incident tracking Assist in developing of insider threat awareness initiatives and incorporate them into periodic security training for all employees Execute investigation requests, generation of reports and best practices, information sharing and management of internal and external stakeholder relationships Utilize trend and anomaly analysis, user activity monitoring, data mining and security device logs to identify potential threats for further investigation and resolution Perform technical investigations in support of potential inside threat activity At Santander, we value and respect differences in our workforce and strive to increase the diversity of our teams. We actively encourage everyone to apply. LI-DA1  Qualifications  Basic Qualifications Bachelorâ??s degree in Computer Science or related field, or the equivalent combination of education, professional training, or work experience 5 - 7 years of demonstrable experience working in an Insider Threat program Hands on experience with a Data Loss Prevention (DLP) tool (Symantec, McAfee, etc.) Hands on experience with Imperva File and Data Activity Management tools Hands on experience with an Incident Management Tool (IBM Resilient, ServiceNow) Ability to liaise with business and technology peers  Preferred Qualifications Experience working on global/multicultural teams across different time zones Strong analytical skills and experience crafting and communicating executive reports Familiarity with data analytics tools used for insider threat information collection on computer networks or knowledge of other insider threat risk scoring tools and programs Understanding threat analysis, user activity data, and DLP data Strong analytical and quantitative skills; ability to use data and metrics to drive recommendations Splunk experience Experience with an industry standard user behavior analytics tool (Exabeam, Securonix, etc.) Ability to present critical security deficiencies and solutions to multiple audiences Excellent communication and organizational skills  Job :  Information Security  Primary Location :  New Jersey-Holmdel-101 Crawfords Corner Road - 06368 - Bell Works  Other Locations :  Massachusetts-Dorchester-2 Morrissey Boulevard - 06367 - Columbia Park-Corp  Organization :  Technology (5900)  Schedule :  Full-time  Job Posting :  Oct 1, 2020, 1:57:29 PM Â

Keywords: Santander Holdings USA Inc, Plymouth , Cyber Security Insider Threat Lead, Other , Plymouth, Massachusetts