Senior Risk Intelligence Specialist - CTJ - Poly

Overview

We are seeking a highly skilled Senior Insider Risk Specialist to join our team. In this role, you will lead complex insider threat investigations involving employees, contractors, and trusted partners. This role operates at the intersection of security, legal, HR, compliance, and counterintelligence, identifying, assessing, and mitigating risks posed by trusted insiders while ensuring investigations are conducted lawfully, discreetly, and in alignment with corporate policy and regulatory requirements. 

This position requires advanced investigative judgment, strong analytical skills, and the ability to influence senior stakeholders while protecting the organization’s people, intellectual property, data, and reputation.  

Microsoft is on a mission to empower every person and every organization on the planet to achieve more. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. Growth mindset encourages each of us to lean in and learn what matters most to our customers, to create the foundational knowledge that enables us to make customer-first decisions in everything we do. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us achieve our mission.

Responsibilities

• Lead endtoend insider threat investigations, including intake, triage, analysis, escalation, and resolution.  

• Conduct complex behavioral, technical, and contextual analysis to identify indicators of insider risk (e.g., data exfiltration, policy violations, coercion, foreign influence, sabotage, or fraud).  

• Correlate data from multiple sources (security telemetry, HR data, legal findings, physical security, and opensource intelligence) to develop investigative hypotheses and risk assessments.  

• Produce clear, defensible investigative findings and recommendations suitable for executive, legal, and regulatory review. 

• Assess insider threat risk severity and likelihood, recommending proportionate mitigation strategies (monitoring, access controls, policy actions, referrals, or case closure).  

• Partner with crossfunctional teams to implement risk mitigation actions while minimizing business disruption.  

• Identify patterns and systemic risks across cases to inform program improvements and preventative controls. 

• Serve as a trusted advisor to Legal, HR, Policy Compliance, Privacy, Global Security, IT, and leadership during sensitive investigations.  

• Ensure investigations comply with employment law, privacy requirements, labor agreements, and internal policies across jurisdictions.  

• Coordinate with external entities when required (e.g., law enforcement, regulators, or government security partners), in alignment with legal guidance. 

• Understanding of insider threat frameworks, potential risk indicators, and investigative methodologies.  
• Demonstrated experience handling sensitive investigations.  
• Counterintelligence, threat intelligence, or national security background.   

 

Qualifications
Required Qualifications

• 5+ years experience in security program or program management or related field OR equivalent experience.

 Oher Requirements:Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:  The successful candidate must have an active U.S. Government Top Secret Clearance with access to Sensitive Compartmented Information (SCI) based on a Single Scope Background Investigation (SSBI) with Polygraph. Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.

• Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud