RemoteLeaf Logo
Log in Sign up

Sr. Insider & Data Risk Analyst

1 day, 11 hours ago
Europe
Full-time
Senior
Security Analyst
Data Science and Analytics
AWS Azure Cybersecurity Elasticsearch GCP Python SIEM Splunk SQL
Apply Now
Alpaca

Alpaca

Alpaca is a developer-first API for stock and crypto trading, offering easy-to-use APIs for building apps and trading algorithms.

Capital Markets
51-250
Founded 2015
$87M raised
View All Jobs 37

Description

  • Own insider risk investigations from triage through closure, including containment, escalation, documentation, and lessons learned.
  • Mature the Insider Risk Management Program, including case management, risk tiering, and repeatable workflows.
  • Operate and tune data loss prevention tools across SaaS, endpoint, and multiple environments.
  • Improve data classification and align DLP controls to data sensitivity levels.
  • Investigate data exfiltration, misuse, policy violations, and suspicious access across code, cloud, collaboration tools, and trading systems.
  • Partner with People/HR, Legal, Compliance, Engineering, and IT on sensitive departure and policy cases.
  • Assess risk from unauthorized AI tooling and sensitive data exposure through approved and unsanctioned AI tools.
  • Lead insider and data risk assessments, maintain risk registers, and support audits and regulatory requirements.
  • Contribute insider risk and data handling content to security awareness and training programs.
  • Serve as the escalation point for insider risk cases and mentor others on investigations and casework.

Requirements

  • 4+ years of experience in insider risk, DLP operations, digital forensics, or security investigations.
  • Hands-on case management experience involving sensitive personnel matters.
  • Experience operating DLP in SaaS and endpoint environments and tuning rules to improve signal quality.
  • Experience with workflow automation, AI, or SOAR platforms for alert triage and case orchestration.
  • Solid understanding of data classification and data governance.
  • Working knowledge of SIEM and log analysis tools such as ELK/Elastic or Splunk.
  • Familiarity with NIST CSF, ISO 27001, SOC 2, and privacy regulations such as GDPR and APPI.
  • Strong written communication skills for investigation reports, case documentation, and executive summaries.
  • High integrity and discretion when handling confidential and sensitive information.
  • Preferred: experience in fintech, financial services, or trading platforms.
  • Preferred: digital forensics or eDiscovery experience.
  • Preferred: experience with UEBA or insider risk detection platforms.
  • Preferred: scripting or automation with Python or SQL.
  • Preferred: experience with major cloud platforms.
  • Preferred: certifications such as GCFA, GCFE, CISSP, CISM, CIPP, or CFE.
  • Preferred: familiarity with SEC/FINRA expectations, broker-dealer controls, and multi-jurisdiction privacy requirements.

Benefits

  • Competitive salary with stock options.
  • Health benefits.
  • One-time USD $500 new hire home-office setup stipend.
  • USD $150 monthly stipend via Brex card.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Universal Martial Arts Academy

Manager, Governance, Risk & Compliance

Universal Martial Arts Academy Education Services

Ultimate Medical Academy is hiring a remote Manager, Governance, Risk & Compliance to lead its institution-wide GRC and information security programs in support of a national higher-education environment.

United States Full-time Lead Compliance Manager Security Analyst
$150k-$159k
Cybersecurity HIPAA Network Security Penetration Testing
12 hours, 11 minutes ago
True Zero Technologies

Senior Information System Security Officer (Senior ISSO) (R-00185)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring a Senior Information System Security Officer to support NIH information systems by leading RMF execution and maintaining operational cybersecurity readiness.

Anywhere Full-time Senior Security Analyst
Agile Cybersecurity
1 day, 11 hours ago
True Zero Technologies

RMF Assessment & Quality Assurance Lead (R-00189)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring an RMF Assessment & Quality Assurance Lead to support NIH enterprise cybersecurity operations by ensuring authorization packages are complete, consistent, and ready for government review.

Anywhere Full-time Senior QA Engineer Security Analyst
1 day, 11 hours ago
True Zero Technologies

Cyber Remediation & POA&M Coordinator (R-00188)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking a Cyber Remediation & POA&M Coordinator to support NIH enterprise vulnerability remediation and RMF activities by tracking, prioritizing, and closing cybersecurity findings across stakeholders.

Anywhere Full-time Mid Level Security Analyst
Cybersecurity Penetration Testing
1 day, 11 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers