Description
Mastercard is seeking a highly motivated and experienced security professional to lead the direction and continued maturity of its Insider Threat capability.
As the Lead Insider Threat specialist, you will serve as the functional authority for Insider Threat across Security Operations, setting direction, defining standards, and driving the evolution of people, process, and technology capabilities that enable the organization to identify, detect, and respond to insider risk.
Key responsibilities:
- Set Insider Threat investigation standards and guide SMEs on complex, high-risk cases.
- Analyze program trends, risks, and metrics to identify improvements and support leadership decisions.
- Build Insider Threat detection strategies, controls, and countermeasures aligned to emerging TTPs.
- Drive the direction and maturity of DLP, UAM, and UBA capabilities with technology owners.
- Maintain Insider Threat policies, processes, procedures, and operating standards.
- Serve as the lead Insider Threat liaison for Technology, Security, HR, Legal, Privacy, Compliance, and M&A partners.
- Assess capabilities and risks, identify control gaps, define remediation plans, and drive the resolution of issues.
- Define capability roadmaps and partner with engineering teams to deliver tool and platform enhancements.
- Track industry trends, emerging threats, and best practices to advance program maturity.
- Maintain current, accurate, and published program documentation and inventories.
- Design exercises to test and strengthen Insider Threat capabilities.
- Lead the Insider Threat Working Group and escalate priorities to the Insider Threat Steering Committee.
Requirements:
- Demonstrated ability to conduct, oversee, or support sensitive, confidential investigations involving employee activity.
- Extensive experience in security operations, incident response, insider risk, digital forensics, or related cybersecurity disciplines.
- Strong understanding of investigative methodologies, evidentiary handling, chain of custody, and detailed report writing.
- Ability to consistently apply an understanding of privacy, data protection, and regulatory considerations.
- Experience developing, enhancing, or governing Insider Threat, Data Loss Prevention, User Activity Monitoring, User Behavior Analytics, or related security capabilities.
- Experience with Microsoft security technologies, including Microsoft Purview, Microsoft Defender / IRM, Microsoft Sentinel, and Endpoint DLP.
- Experience with Security Information and Event Management (SIEM) platforms and security event analysis.
Benefits:
- Insurance (including medical, prescription drug, dental, vision, disability, life insurance)
- Flexible spending account and health savings account
- Paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave)
- 80 hours of Paid Sick and Safe Time
- 25 days of vacation time and 5 personal days
- 401k with a best-in-class company match
- Deferred compensation for eligible roles
- Fitness reimbursement or on-site fitness facilities
- Eligibility for tuition reimbursement