Senior Insider Risk Analyst

**Company Description**
Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years we’ve been named in the 100 “World’s Most Innovative Companies” by Forbes Magazine. With a focus on our employees, we have been certified for the third time as Great Place To Work (GPTW). Experian Consumer Information Services is redefining the way our clients do business within all aspects of the customer credit lifecycle. Fueled by best-in-class data and innovative technology we help businesses make smarter decisions, identify consumers, make decisions on loans, market to prospects and collect.

Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years we’ve been listed as one of the 100 “World’s Most Innovative Companies” by Forbes Magazine.

What you’ll be doing

The Senior Insider Risk Analyst will participate in and lead efforts to grow and expand Experian’s global Insider Risk Management Program, work with stakeholders, technical processes, and Cyber Fusion Center leadership to enhance detection capabilities, case intake and reporting, use case development, and other aspects relevant to Insider Threat prevention, detection, and response.

This role is responsible for managing and improving predictive and detection analytics models, DLP controls, real-time monitoring tools, building dashboards and queries, automating processes, and authoring insider risk products to improve Experian’s global insider risk and data loss prevention programs. This role also entails proactive analysis of emerging insider and cyber threat trends based on cyber threat intelligence and participation in purple teaming exercises to proactively identify and mitigate risks to Experian’s environment.

Summary of Primary Responsibilities
- Analyze and interpret information collected by various technical and non-technical data sources to detect and respond to insider risk and data loss incidents.
- Conduct analysis of alerts and associated tools and data to identify false positives, improve precision rates, and streamline tooling and investigations effectiveness and impact.
- Improve predictive analytics models and associated real-time monitoring solutions.
- Build dashboards, automate processes, and design queries for investigations.
- Conduct proactive analysis on emerging insider risk trends to determine prevalence of threats in Experian’s environment.
- Identify opportunities to improve the capability and accuracy of insider threat detection through lessons learned.
- Work with partner teams on internal threat detection and response projects.
- Ability to produce documentation, including SOPs, process flows, and reporting and metrics using a variety of tools and information sources (SIEM, UEBA, project and knowledge management systems, case management system, etc.)

**Qualifications**
- Bachelor's Degree in Data Analytics, Data Science, Information Systems or relevant field.
- Minimum 7 years of experience working in an insider risk or cyber security investigation field.
- Experience in mitigating insider threats and managing insider risk by utilizing UEBA and DLP tools.
- Use SIEM expertise building correlation searches, dashboards, and other knowledge objects from scratch to detect insider risk or display information of interest
- Experience with data visualization tools such as Tableau or PowerBI
- Experience in implementation of cybersecurity, network defense, and investigative frameworks.
- Knowledge of SOC environment methodology to include threat monitoring, intrusion detection, incident response, and analysis.
- Strong analytic skills, with the ability to spot anomalies and patterns, conduct link analysis, and draw relevance to the enterprise.
- Experience writing and presenting briefings on investigations to all levels of staff and management in high-pressure environments.
- Knowledge of the cyber threat landscape, including types of adversaries, campaigns, and how insider and cyber threats are fueled.
- Process driven, and has eye for detail, automation, and efficiency to improve programs/processes.
- Business-fluent written and spoken English language skills. Excellent written and verbal communication skills with the ability to effectively tailor communication of technically complex issues to various audiences.
- Certifications
- ITPM, GCITP, CISSP, GCIH, SANS, GIAC preferred.

**Additional Information** **This is a permanent home-based role in Costa Rica. No Visa sponsorship or relocation available.**

Our benefits include: Medi