Jobgether
Sr. Insider & Data Risk Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Sr. Insider & Data Risk Analyst
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Insider & Data Risk Analyst based in the United Kingdom.
This is a senior individual contributor role focused on protecting sensitive information, systems, and people from insider and data-loss risks. You will own complex investigations from initial triage through resolution while helping mature insider risk management and Data Loss Prevention capabilities. The role sits at the intersection of cybersecurity, data protection, privacy, and regulated financial services. You will work closely with People/HR, Legal, Compliance, Engineering, IT, and Security teams on highly sensitive cases requiring discretion and sound judgment. The position also offers an opportunity to strengthen risk processes, automate investigations, and apply AI to emerging security challenges. Success requires a highly organized professional who can translate complex findings into clear recommendations for both technical teams and leadership.
Accountabilities
- Own insider risk investigations from initial triage through closure, including establishing case timelines, coordinating containment and escalation, documenting determinations, and capturing lessons learned.
- Mature the Insider Risk Management Program by developing scalable case-management processes, risk-tiering methodologies, investigation standards, and repeatable workflows.
- Operate, monitor, and tune Data Loss Prevention capabilities across SaaS applications, endpoints, and other environments, improving detection quality while reducing false positives.
- Investigate potential data exfiltration, misuse, policy violations, and inappropriate access involving source code, cloud platforms, collaboration tools, third-party applications, and critical business or trading systems.
- Strengthen data classification and governance practices while aligning DLP controls with information sensitivity and business risk.
- Assess risks associated with unauthorized AI and agentic tooling, including potential exposure of sensitive or proprietary information through approved and unsanctioned AI applications.
- Use workflow automation, AI, and security orchestration capabilities to improve alert triage, investigation efficiency, and the overall maturity of insider risk processes.
- Lead insider risk and data protection assessments, maintain risk registers, and track remediation activities and emerging threats.
- Partner with People/HR, Legal, Compliance, Engineering, IT, and Security on sensitive personnel cases, departures, policy violations, and data-handling concerns with a high level of discretion and care.
- Support internal and external audits, regulatory requirements, and security assurance activities related to insider risk, data protection, privacy, and information security.
- Contribute insider risk and secure data-handling content to security awareness and employee training programs.
- Serve as a senior escalation point for insider risk cases and mentor colleagues on investigation methodologies, case management, and effective risk analysis.
- Monitor developments in insider risk, data protection, privacy, cybersecurity, and financial services regulation to identify opportunities for continuous improvement.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements:
- 4+ years of professional experience in insider risk, Data Loss Prevention, digital forensics, security investigations, or a closely related discipline.
- Demonstrated hands-on experience leading sensitive investigations and managing cases involving personnel matters, data misuse, policy violations, or potential exfiltration.
- Practical experience operating and tuning DLP solutions across SaaS and endpoint environments, with an understanding of detection quality and false-positive reduction.
- Experience with workflow automation, AI, or SOAR platforms for alert triage, investigation support, and case orchestration.
- Strong understanding of data classification, data governance, data protection, and information security principles.
- Working knowledge of SIEM platforms and log analysis, such as Elastic/ELK or Splunk, to support investigations and establish evidence-based conclusions.
- Familiarity with security and compliance frameworks including NIST CSF, ISO 27001, SOC 2, and privacy regulations such as GDPR and APPI.
- Strong written and verbal communication skills, with the ability to produce clear investigation reports, case documentation, risk assessments, and executive summaries.
- Exceptional integrity, discretion, and judgment when handling confidential personnel, customer, business, and security information.
- Strong organizational skills and attention to detail, with the ability to manage multiple sensitive investigations in a fast-paced, distributed environment.
- Ability to collaborate effectively with People/HR, Legal, Compliance, Engineering, IT, and Security stakeholders.
- Experience with digital forensics, eDiscovery, UEBA, insider risk platforms, security operations, or incident response is an advantage.
- Scripting or automation experience using technologies such as Python or SQL is a plus.
- Experience with major cloud platforms and familiarity with supporting SOC 2, ISO 27001, or regulatory audits is beneficial.
- Exposure to fintech, financial services, trading platforms, or regulated environments is strongly valued.
- Relevant certifications such as GCFA, GCFE, CISSP, CISM, CIPP, CFE, or equivalent are considered a plus.
- Familiarity with financial services regulatory expectations and multi-jurisdiction privacy requirements is advantageous.
- A genuine interest in AI-related data risk and using emerging AI capabilities to improve security operations and investigation workflows.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits:
- Competitive salary and stock options.
- Health benefits.
- One-time USD $500 new-hire home-office setup allowance.
- USD $150 monthly stipend through a Brex Card.
- Opportunity to work within a globally distributed team spanning multiple countries and time zones.
- Exposure to cutting-edge cybersecurity, financial technology, cloud infrastructure, AI, and data protection challenges.
- An inclusive environment committed to diversity and equal opportunity.
How Jobgether Works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location