Lead Insider Threat Program Analyst

About the role

Mastercard is seeking a senior security professional to lead its Insider Threat capability within the Security Event Management group. The role will define standards, drive maturity of detection technologies, and guide investigations across a global network of stakeholders.

Key responsibilities

• Set investigation standards and guide SMEs on high‑risk insider cases.
• Analyze program trends and metrics to recommend improvements.
• Develop detection strategies, controls, and counter‑measures aligned to emerging TTPs.
• Drive maturity of Data Loss Prevention, User Activity Monitoring, and User Behavior Analytics.
• Maintain policies, processes, and operating standards for insider threat.
• Serve as liaison with Technology, Security, HR, Legal, Privacy, Compliance, and M&A partners.
• Define capability road‑maps and partner with engineering to deliver tool enhancements.

Required profile

• Proven ability to conduct sensitive investigations while maintaining professionalism, discretion, and privacy compliance.
• Extensive experience in security operations, incident response, insider risk, or digital forensics.
• Strong knowledge of investigative methodology, evidentiary handling, and report writing.
• Understanding of privacy, data‑protection, and regulatory frameworks such as GDPR.

Required skills

• Microsoft Purview, Microsoft Defender/IRM, Microsoft Sentinel, Endpoint DLP.
• Security Information and Event Management (SIEM) platforms.
• Windows and macOS operating systems.
• Threat hunting, OSINT, and cyber investigation techniques.
• Relevant certifications (CISSP, GCIH, GCIA, Security+).