Senior Insider Risk Analyst

The Senior Insider Risk Analyst will participate in and lead efforts to grow and expand Experian's global Insider Risk Management Program. You will work with stakeholders, technical processes, and Cyber Fusion Centre leadership to enhance detection capabilities, case intake and reporting, use case development, and other aspects relevant to Insider Threat prevention, detection, and response. This role is responsible for managing and improving predictive and detection analytics models, DLP controls, real-time monitoring tools, building dashboards and queries, automating processes, and authoring insider risk products to improve Experian's global insider risk and data loss prevention programs. This is a hybrid, Nottingham or London based role (40% in the office) reporting to the Insider Risk Director. • Analyse and interpret information collected by various technical and non-technical data sources to detect and respond to insider risk and data loss incidents, including advanced correlation of large datasets across multiple security platforms. • Provide technical expertise and respond to investigator inquiries regarding data and the broader technical environment to support and advance insider risk investigations. • Conduct analysis of alerts, tools and associated data to identify false positives, improve detection and enhance the effectiveness and efficiency of investigative processes. • Improve predictive analytics models and associated real-time monitoring solutions, including developing, testing, and refining detection logic and use cases in collaboration with Security Engineering. • Build dashboards, queries and specialised monitoring capabilities to support investigations, including sensitive or close-hold Insider Risk activities. • Develop scripts and automated workflows to streamline data correlation, alert enrichment, investigative analysis and reporting. • Conduct proactive analysis of emerging insider risk trends to determine prevalence of threats in Experian's environment. • Produce documentation, including SOPs, process flows, and reporting and metrics using a variety of tools and information sources (SIEM, UEBA, project and knowledge management systems, case management systems, etc.). • Provide operational cross-coverage for Insider Risk and DLP governance activities, including investigations, policy and exception reviews, and business engagement, following established procedures and escalation requirements. • Demonstrated hands-on SIEM expertise developing complex queries, correlation searches, dashboards, and content from scratch, using YARA-L, SPL, KQL, SQL, or equivalent query and detection languages. • Experience in insider risk, cybersecurity investigations, security analytics, or a related technical security discipline. • Experience in mitigating insider threats and managing insider risk by utilizing UEBA and DLP tools. • Experience analysing and correlating large, complex datasets across multiple security technologies to identify anomalies and behavioral patterns. • Hands-on experience with scripting or programming languages such as Python, PowerShell, or equivalent technologies to automate analytical and investigative workflows. • Relevant cybersecurity or insider risk certifications preferred, including CERT Insider Threat Program Manager (ITPM) Certificate, Global Counter-Insider Threat Professional (GCITP), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant GIAC certifications or SANS cybersecurity training. Benefits include:- • Great compensation package and discretionary bonus plan • Core benefits include pension, bupa healthcare, sharesave scheme and more! • 25 days annual leave with 8 bank holidays and 3 volunteering days