Insider Fraud Detection Analyst

This role is an Insider Threat Program Analyst working in the Data Protection and Security Program. The Program Analyst is responsible for supporting, developing, and enhancing the insider threat program. The colleague will engage with Business Units across the organization, produce metrics and documentation, and implement tools and analytic methods to mitigate insider risks. A successful candidate will:

• Assess existing Insider Threat capabilities, identify gaps, and develop technical and non-technical indicators
• Assist in evaluating and implementing tools to mitigate insider threats 
• Partner with other groups within the organization to identify, implement, and document processes to mitigate insider risk
• Assist in collecting, analyzing, and interpreting data from multiple sources to improve the ability to prevent, detect, and respond to insider risks
• Discern patterns of complex threat actor behavior, communicate an understanding of current and developing Cyber threats to key stakeholders, and stay current with emerging trends and threats in the field of insider threat
• Collaborate with internal departments to ensure that tools developed for colleague use include adequate data streams to support fraud detection and reporting capabilities
• Interpret findings from fraud detection reports to identify and escalate potential incidents of internal fraud, theft, or misconduct
• Create and maintain insider fraud detection reports derived from various internal and external data sources
• Experience in collaborating with internal departments to ensure tools developed for colleague use include adequate data streams for fraud detection
• Ability to interpret findings from fraud detection reports to identify potential incidents of internal fraud, theft, or misconduct
• Experience in creating and maintaining insider fraud detection reports

Required Qualifications:

• Understanding of information security concepts, best practices, and regulations related to insider threat
• Understanding of enterprise security and networking technology and how the technology relates to the prevention, detection, and response of insider threats
• Advanced understanding of the Microsoft ®Office suite (e.g., Outlook, Word, Excel, PowerPoint, etc)
• Excellent verbal and written communication skills (including but not limited to: correct English usage, grammar, spelling, punctuation, vocabulary, etc.). 
• Ability to execute work independently and as a team member with good interpersonal skills.

Preferred Qualifications:

• Experience as a security consultant
• Knowledge of machine learning and its applications in information security
• Familiarity with the Financial Services Industry
• Experience performing security event and incident detection and handling in a large corporate environment, gathering and analysis of threat intelligence, and computer network surveillance/monitoring 
• Experience configuring and using user and/or entity behavior analytics (UBA/UEBA) products 
• Advanced knowledge of statistics and modeling, both for anomaly identification and alert tuning 
• Experience in collaborating with internal departments to ensure tools developed for colleague use include adequate data streams for fraud detection
• Ability to interpret findings from fraud detection reports to identify potential incidents of internal fraud, theft, or misconduct
• Experience in creating and maintaining insider fraud detection reports
• Experience with SQL and Python
• Certifications: Associate of (ISC)^2, or similar.

Required Education:

• Bachelor’s degree in Information Security, Computer Science or a related field  + 1 years relevant experience

Preferred Education:

Bachelor’s degree Bachelor’s degree in Information Security, Computer Science, Criminal Justice or a related field + 3 years experience

 

Schedule: M-F 8:00 AM – 5:00 PM

Hours: 40 hours per week

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or