Global Security (GS) protects the firm's employees and assets throughout the world. This responsibility includes the development of security and safety policies and procedures, regulatory and legislative compliance, corporate aviation, guard management, alarm response, crisis management, ATM, branch and corporate building security and customer safety, physical crime investigations, workplace violence, fire and life safety, pre-employment screening, fraud and employee investigations.

Within GS, the Threat Detection and Analysis team is responsible for identifying potential threats against the firm and its workforce from internal and external actors and developing strategies to mitigate those threats to protect the firm’s reputation, workforce, clients, and assets. 

The Insider Risk Program Associate role that will support the head of Insider Risk in defining and executing on the firm wide Insider Risk Program. The Program Associate will be responsible for program coordination functions supporting the identification, monitoring, testing, evaluation, and governance of insider risk processes and controls for the company. The candidate must be a highly motivated individual with organization and communications skills, able to leverage their experience to advance the firm’s framework and program for identifying and mitigating threats and related insider risks. The candidate will coordinate design review efforts for enhancement of enterprise controls, document insider risk reduction, assist in the assessment of insider control efficacy, and develop metrics ensuring completeness, effectiveness, and suitability. The position will also work with various partners within the firm, including but not limited to Cybersecurity, Technology, Risk Management & Compliance, Legal, Human Resources, and Regulatory Affairs, as well as external partners. The ability to work effectively with a diverse set of stakeholders is essential. The role requires creativity, critical thinking, strong communication and influencing skills, and the ability to work across a large and complex organization that features prominently in both U.S. critical infrastructure and the global financial ecosystem.

Job Responsibilities:

• Contribute to critical deliverables for the program by developing strategic solutions that adhere to data privacy requirements and expectations.
• Contribute to day-to-day program development, project management and delivery in an agile environment.
• Work closely with stakeholders to identify scope, issues, implementation plans and define solutions
• Partner with threat modelers, insider risk analysts, program leaders and risk managers to drive effective program deliverables.
• Assess processes, controls, technologies, metrics, and reporting used for Insider Risk.
• Engage with various security and control teams understand the control environment, both procedural and technical
• Partner closely with programs on Insider Risk, Strategic Threats, Workplace Violence and key stakeholders
• Devise recommendations and solutions to continuously improve the insider risk program
• Assist federated insider risk domains in the development of insider risk scenarios and corresponding program metrics
• Present written and oral communication of the Insider Risk Program development and progress to senior management and stakeholders
• Develop awareness of leading-edge processes and technologies to detect, assess and mitigate internal and external threats
• Keep abreast of current global causes of both insider and external threats (e.g. political, financial, ideological)

Required Qualifications, Capabilities, and Skills: 

• At least 3 years of experience in technical program management, project planning, workstream management, stakeholder engagement, issue and risk management. 
• Experience in performing quantitative and/or qualitative analysis
• Proficiency with MS Office suite, Jira and/or Confluence.
• Strong presentation skills working extensively with PowerPoint.
• Strong interpersonal skills, written and verbal communication, and executive level presentation.
• Self-starter with the ability to think independently, demonstrate strong analytical and problem-solving skills and passion for developing new solutions, innovation and experimentation.
• Familiarity with insider threat/risk analysis and security scenarios/concerns.

Preferred Qualifications, Capabilities, and Skills: 

• Experience in or knowledge of the financial industry.
• Experience in identifying anomalous activities/behaviors and developing hypotheses to explain them
• Experience conducting or directly providing analytical support to cybersecurity, criminal, counterintelligence, and/or insider threat/risk investigations.
• Insider Threat (e.g. CERT courses, CCITP, GCITP, etc.), Cybersecurity, Counterintelligence, analytical tradecraft training and certifications.