Sr. Analyst, Insider Threat Operations

TransUnion's Job Applicant Privacy Notice

What We'll Bring:

TransUnion’s Global Information Security organization is seeking a passionate team member to join our Global Insider Threat Program (GITP) as Sr. Analyst – Insider Threat Operations. You will be joining a global multi-functional team of about 20 security professionals that ensure TransUnion’s critical data assets are safeguarded from insider threats.
In this high-impact Operations Level 1 sr. analyst role, you will be a Cybersecurity professional experienced with recognizing business processes and differentiating those from insider threat activities within TransUnion’s environment. This position involves leading continuous monitoring initiatives, shaping detection strategies, and mentoring team members to enhance analytical capabilities. Your contribution will be instrumental in advancing TransUnion’s insider threat program and aligning it with broader organizational risk management goals.
In addition to technical proficiency, this role requires demonstrating excellent English communication skills to include the ability to obtain data from associates and explain findings to TransUnion colleagues and senior leadership.

What You'll Bring:

Job Responsibilities:

• Associate Behavioral Monitoring – Working with Insider Threat Operations and Insider Threat Investigations, proactively monitor subject users for anomalous or suspicious behavior that may indicate malicious insider activity, compromised accounts, or represent inappropriate risks.
• Analyze User Risks to TransUnion Data Assets - Utilizing various data loss prevention tools and processes, analyzing behavioral data from logs to identify users exhibiting indicators of being an Insider Threat.
   
• Drive Overall Data Loss Risk Reduction – Communicate threat activity to appropriate teams for initiating mitigations.  Also, partner with peer Insider Threat Operations, Insider Threat Investigations, and Insider Threat Engineering teams to ensure rapid & seamless Insider Threat monitoring capabilities and response. 

• Perform Incident Documentation - Record analytic and operational activity in collaboration tools and GITP’s system of record to ensure accurate incident documentation at an appropriate level of detail for each case.

• Drive Cross-Functional Collaboration - Collaborate with global Information Security colleagues to share threat information.  Contact relevant parties to clarify and enhance existing business processes with external stakeholders.
• Support Continuous Improvement – Support the improvement of program effectiveness and risk posture through effective reports and dashboards for leadership on insider threat trends and case metrics.  Additionally, continuously monitor industry DLP / insider threat reduction technologies and approaches for improvement opportunities.

Impact You'll Make:

Qualifications:

• Bachelor's degree in cybersecurity, computer science, engineering, or a related field preferred.
• Previous experience (3+ years) in an Information Security operations role coupled with a strong understanding of the cyber and insider threat / data loss prevention landscape.
• Deep experience with data loss prevention (DLP), insider threat detection, and user and entity behavior analytics (UEBA) capabilities such as Microsoft Purview, Symantec, Proofpoint, Netskope, Forcepoint, DTEX, etc.
• Analytical mindset coupled with a proven ability to examine multi-source data to make insider threat risk assessments.
• Passion for innovation and improving processes along with a curiosity for exploring new security capabilities.
• Strong written and verbal English communication skills
• Relevant security certifications such as CISSP, CISM, Insider Threat Program Manager (ITPM) or similar are highly desirable.

This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management.

TransUnion Job Title

Sr Analyst, Cybersecurity