Insider Risk Lead
$180,000–$220,000 year
Hybrid · Arlington, Virginia, United States
Job Summary
The Insider Risk Lead will design, govern, and mature the enterprise Insider Risk Program, directing strategy, detection, investigations, and cross-enterprise collaboration to identify behavioral and data-driven indicators of risk and to guide sensitive risk response actions. The role partners with cybersecurity, legal, HR, compliance, and business leadership to establish policies, standards, and procedures aligned with regulatory expectations; will oversee monitoring tools (UBA, DLP, privileged activity analytics), coordinate investigations, and produce executive dashboards and reports. This position requires high judgment and discretion, strong analytical and communication skills, and the ability to operate in a decentralized enterprise environment.
Required Qualifications
- Bachelor's degree in cybersecurity, information technology, risk management, or related field (or equivalent experience)
- 7+ years of experience in cybersecurity, insider threat, digital forensics, SOC operations, or similar roles
- Proven experience developing or managing insider risk or behavioral analytics programs
- Strong understanding of data protection, access management, monitoring tools, and investigative methodologies
- Superior communication and judgment, especially in sensitive or confidential situations
- Experience in decentralized or federated enterprise environments
- Relevant certifications (e.g., CISSP, CISM, CEH, GIAC certified tracks)
- Experience with UBA, SIEM, DLP, endpoint detection, or cloud analytics platforms
- Experience working with HR, legal, or compliance leadership on risk matters
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.