Title: Director of Insider Risk Management
Location: Miami, FL
Duration: Direct Hire
Compensation: $160,000 - $180,000
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.
Director of Insider Risk Management
The Director of Insider Risk Management is responsible for developing, implementing, and overseeing a comprehensive insider risk management program across our global environment. This role involves identifying, assessing, and mitigating risks posed by insiders, including employees, contractors, and business partners, to protect the organization's assets, intellectual property, and reputation.
Essential Functions:
- Develop and implement a global insider risk management program that aligns with the organization's strategic goals and risk appetite by establishing policies, procedures, and controls to detect, prevent, and respond to insider threats.
- Conduct regular risk assessments to identify potential insider threats and vulnerabilities. Develop and implement risk mitigation strategies and action plans to address identified risks.
- Collaborate with Security Operations to implement and oversee monitoring systems and tools to detect suspicious activities and behaviors.
- Lead investigations into suspected insider incidents, coordinating with relevant departments and external agencies as necessary. Develop and maintain an incident response plan for insider threats, ensuring timely and effective response to incidents.
- Work with other security teams to design training programs to educate employees and stakeholders about insider risks and best practices for mitigating them
- Collaborate with HR, Legal, IT, and other departments to ensure a holistic approach to insider risk management. Serve as the primary point of contact for insider risk management, providing regular updates and reports to senior leadership.
- Ensure the insider risk management program complies with relevant laws, regulations, and industry standards.
- Develop key performance indicators (KPIs) and metrics to measure the effectiveness of the insider risk management program. Prepare and present regular reports to senior leadership, highlighting trends, incidents, and program improvements
Qualifications:
- Minimum Education: Bachelor's Degree/Master's Degree a plus
- Discipline/Major: Bachelor's degree in security management, Information Security, Risk Management, or a related field. A master's degree or relevant certifications (e.g., CISSP, CISM) are preferred
- Required Certifications: Desired to have one of or more of the following certificates: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor)
- Experience in cybersecurity, with at least 5 years in a leadership role focused on insider threat management
- Critical Professional Related Technical/Computer Skills: Experience with security information and event management (SIEM) tools, user behavior analytics (UBA), and other relevant technologies
- Other Requirements: Team management and stakeholder management. Skilled at mentoring and motivating staff, communicating goals and other corporate initiatives, and driving to results
- Preferred Education: Master's degree in degrees relevant to IT
- Preferred Experience & Type: At least 10 years of experience in risk management, security, or a related field, with a focus on insider threats. - Proven track record of developing and managing insider risk programs at a global scale
- Strong understanding of insider threat frameworks, methodologies, and best practices.
- Excellent analytical and problem-solving skills, with the ability to assess complex situations and develop effective solutions.
- Exceptional communication and interpersonal skills, with the ability to influence and collaborate with stakeholders at all levels.
- Strong leadership and project management skills, with experience leading cross-functional teams
Decision-Making:
- Strategic: Decisions affect the long-term direction and policy of the entire company. These decisions affect the short-term and long-term performance of GCS. Strategic decisions are high-risk because their outcomes are largely unknown and have a huge impact. These types of decisions are usually made at the top level of a company. Examples are new services, acquisitions.
- Tactical: Decisions focus on intermediate-term issues. The purpose of decisions made at this level are to assist and guide brands on their duties around Infrastructure, application, and data security
- Operational: Decisions focus on day-to-day activities within the company. Decisions made at this level help to ensure that daily activities proceed smoothly and therefore help to move the company toward reaching a strategic goal. They have short term consequences. Examples are Handling employee conflicts, purchasing materials needed for operations
About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities
25-11526