Senior Insider Risk Analyst

The Senior Insider Risk Analyst will participate in and lead efforts to grow and expand Experian's global Insider Risk Management Program.

You will work with stakeholders, technical processes, and Cyber Fusion Centre leadership to enhance detection capabilities, case intake and reporting, use case development, and other aspects relevant to Insider Threat prevention, detection, and response.

This role is responsible for managing and improving predictive and detection analytics models, DLP controls, real-time monitoring tools, building dashboards and queries, automating processes, and authoring insider risk products to improve Experian's global insider risk and data loss prevention programs.

This is a hybrid, Nottingham or London based role (40% in the office) reporting to the Insider Risk Director.

• Analyse and interpret information collected by various technical and non-technical data sources to detect and respond to insider risk and data loss incidents, including advanced correlation of large datasets across multiple security platforms.
• Provide technical expertise and respond to investigator inquiries regarding data and the broader technical environment to support and advance insider risk investigations.
• Conduct analysis of alerts, tools and associated data to identify false positives, improve detection and enhance the effectiveness and efficiency of investigative processes.
• Improve predictive analytics models and associated real-time monitoring solutions, including developing, testing, and refining detection logic and use cases in collaboration with Security Engineering.
• Build dashboards, queries and specialised monitoring capabilities to support investigations, including sensitive or close-hold Insider Risk activities.
• Develop scripts and automated workflows to streamline data correlation, alert enrichment, investigative analysis and reporting.
• Conduct proactive analysis of emerging insider risk trends to determine prevalence of threats in Experian's environment.
• Produce documentation, including SOPs, process flows, and reporting and metrics using a variety of tools and information sources (SIEM, UEBA, project and knowledge management systems, case management systems, etc.).
• Provide operational cross-coverage for Insider Risk and DLP governance activities, including investigations, policy and exception reviews, and business engagement, following established procedures and escalation requirements.

Department: Information Security
Function: Information Technology
Experience Level: Not Applicable