Information Security Expert Leader

We are seeking a highly skilled and experienced professional to lead our Insider Threat & Risk Management team within the Information Security group.

This role is critical in identifying, assessing, and mitigating insider risks to protect our firm's critical data, intellectual property, and operational integrity.

• Program Development & Leadership: Design and implement a comprehensive insider threat and risk management program aligned with business and security objectives.
• Threat Detection & Response: Utilize data analytics, behavioral indicators, and security tools (e.g., UEBA, DLP, SIEM) to monitor and investigate potential insider threats.
• Risk Assessment & Mitigation: Conduct insider risk assessments, define detection methodologies, and recommend mitigation strategies.
• Collaboration & Stakeholder Engagement: Work closely with Legal, HR, IT, Security Operations, and Compliance teams to develop policies, response frameworks, and training initiatives.
• Incident Handling & Investigations: Lead investigations into potential insider threats, ensuring timely response and remediation while adhering to privacy and legal considerations.
• Security Awareness & Training: Drive awareness programs to educate employees and leaders about insider risks and best practices.
• Regulatory & Compliance Alignment: Ensure the program aligns with industry standards (e.g., NIST, ISO 27001, SOC2) and regulatory requirements.
• Continuous Improvement: Regularly assess and refine the program to adapt to evolving threats and business needs.

• Education: Bachelor's degree in information security, cybersecurity, or related field.
• Experience: 6+ years of experience in information security, with a focus on information protection, DLP, and data protection.
• Knowledge: Strong understanding of information security frameworks, regulations, and standards (e.g., ISO 27001, NIST, GDPR).
• Skills: Familiarity with network security, endpoint protection, and cloud security principles.
• Critical Thinking: Ability to balance proactive prevention with reactive incident response.
• Integrity: High ethical standards and discretion when handling sensitive information.
• Leadership: Demonstrated ability to build and lead teams, with excellent communication and interpersonal skills.
• Certifications: Experience with security technologies such as data classification, DLP, encryption, SIEM, and access controls.
• Professional Certifications: Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.
• Analytical Skills: Excellent analytical and problem-solving skills, with the ability to assess risks and recommend effective solutions.
• Communication Skills: Strong communication and interpersonal skills to collaborate with various teams and stakeholders.
• Track Record: Proven track record of successfully implementing and managing information protection programs.

We offer a comprehensive total rewards package including health and well-being, financial planning, annual leave, personal growth, and professional development.

Our robust skills development programs, multiple career progression options, internal mobility paths, and collaborative culture empower you to thrive as an individual and global team member.

We are committed to giving our employees a flexible and connected way of working. A flexible and connected us allows us to combine work from home and on-site presence at clients/offices for the majority of our week.

The magic of our culture and innovation thrives in both planned and spontaneous face-to-face connections.

Travel is a requirement for client-facing team members. While some projects may be local, all client-facing team members should be prepared to travel as needed.

Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures.