Sr. Lead Data Loss Prevention/Insider Threat Manager

TIAA is seeking a Sr. Lead Data Loss Prevention/Insider Threat Manager. This role will manage the day-to-day operations and effectiveness of security-related programs and initiatives; assesses the costs associated with potential threats and solutions required to eliminate or minimize threats.

Key Responsibilities and Duties

• Lead in the development, implementation and enforcement of organization-wide security risk assessment and control standards, policies and procedures that are related to Data Loss Prevention (DLP) and Insider Threat.
• Manage activities to detect and/or prevent cyber risk resulting from internal resources sending data externally that is unauthorized or an authorized data transfer that is lacking required cybersecurity controls; ensure that data being sent externally is compliant with security procedures, systems, and policies.
• Monitor and assess business needs against security concerns and recommending necessary changes to enhance information systems security.
• Develop training on information security risk metrics, policies, risk migration and elimination procedures for staff, coordinating with audits and suppliers on information security improvement.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 5+ Years Required; 7+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
9PL

Qualifications:

Required:

• Minimum of 5 Years of Information Security/Cybersecurity experience.
• At least 3 years’ experience with Data Loss Prevention, User Behavior Analytics (UBA) or Insider Threat experience.

Preferred:

• Minimum of 7 or more years of experience working in cybersecurity.
• At least 3 or more years of experience in managing, leading, and/or mentoring a team of managers and/or individual contributors.
• Minimum of 5 or more years of experience working with at least one of the following enterprise security solutions: Security Information and Event Management, Data Loss Prevention, Endpoint Detection & Response, or User Behavior Analytics (UBA).
• Experience with modern Data Loss Prevention approaches including the use of Zero Trust framework, cloud and SaaS Data Loss Prevention solutions, and Data Loss Prevention that are content and context aware.
• Specialized experience in cyber incident response and cyber incident management
• Analytical ability - The applicant should have experience identifying red flags, validating sources, and making judgment calls about the completeness and accuracy of open-source information.
• Excellent writing skills - The applicant should be familiar with legal and financial nomenclature and be able to draft accurate, concise summaries.
• Strategic planning and resourcefulness - The applicant will be responsible for developing investigative plans and strategies for engagements and producing creative solutions to challenging research problems.
• Experience identifying and managing work performed by subcontractors, including negotiating budgets and deadlines.
• Experience collaborating with international colleagues and coordinating investigations across time zones. 
• Strong people skills, able to communicate with a wide range of technical and non-technical partners.

#LI-VR1

Related Skills

Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively

Anticipated Posting End Date:

2024-07-20

Base Pay Range: $138,000/yr. - $189,000/yr.

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.  In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans). 

_____________________________________________________________________________________________________

Company Overview

TIAA is the leading provider of financial services in the academic, research, medical, cultural and government fields. We offer a wide range of financial solutions, including investing, banking, advice and education, and retirement services.

Benefits and T