Senior Insider Risk Analyst

About TaskUs: TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech.

The People First culture at TaskUs has enabled the company to expand its workforce to approximately 45,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer: At TaskUs, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee's career within TaskUs. Join our team today and experience firsthand our dedication to supporting People First.

What can you expect in a “Position Title” role with TaskUs: 

The Senior Insider Risk Analyst is crucial to safeguarding the company from insider threats. This individual will join the Insider Risk Management (IRM) Team dedicated to monitoring, investigating, and analyzing potential insider risks, and developing strategies to enhance our insider risk program. The Senior Analyst will support daily monitoring and investigation efforts and contribute to the program's overall development by helping to assess risks, proposing mitigation strategies, and helping to define operational processes for the insider risk team.

• Protect company assets and intellectual property. 

• Correlate, interpret and analyze user behavior with logs from various sources for suspicious activities indicative of insider threats.

• Review escalated alerts from the Insider Risk Management (IRM) Team

• Lead thorough investigations into potential insider risk incidents, gathering evidence, and documenting findings.

• Collaborate with Information Security, Executive Leadership, Legal, Human Resources, IT and other relevant departments during investigations and remediation efforts.

• Contribute to the continuous improvement of the insider risk program, including designing team processes, proposing business policies and evaluating technology to support ITM..

• Assessing insider threat risks to company systems and recommending mitigating controls.

• Mentors IRM Team members

Required Qualifications: 

• Thorough understanding of IT Risk Management concepts, cybersecurity principles, forensic investigative techniques, and threat-hunting practices.

• Expertise of insider threat concepts, risk indicators, detection methodologies and related security operations

• Strong analytical and problem-solving skills to address complex, ambiguous problems independently. 

• Knowledge of governance structures and operational guidelines for insider threat programs, with the ability to assist in their development and improvement.

• Proficiency in using tools and technologies for insider threat detection and investigation.

• Effective communication skills for collaborating with cross-functional teams and presenting findings clearly.

• Excellent organizational skills to independently manage multiple tasks and prioritize daily operational responsibilities.

Preferred Qualifications: 

• Experience with SIEM/SOC tools and processes, including writing custom detection rules

• Experience with us