Wait, What Do You Do?

<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Job Summary</H2> </div><div> Ready to take the next step in your career with us?  To us, good performance is about much more than turning a profit. It's about showing how you embody our valued behaviours - do the right thing, better together and never settle - as well as our brand promise, Here for good.  We're committed to promoting equality in the workplace and creating an inclusive and flexible culture - one where everyone can realise their full potential and make a positive contribution to our organisation. This in turn helps us to provide better support to our broad client base. About the team The Insider Threat Defence Team (part of the Cybersecurity & Anti-Crime Technology function within Technology & Operations) is a relatively new team, which has started to make a big impact. The team works with stakeholders and peers across the Bank to detect, investigate and manage events which may harm the Bank or its’ assets. About the role We now need an Insider Threat Investigator to help us grow further. In this role, you will be responsible for leading the day-to-day efforts to identify and assess insider risks, threats, and events as well as help identify control weaknesses and drive control enhancements across a wide variety of business and functions at Standard Chartered. As a senior specialist in the team you will be involved in complex investigations and surveillance of known or suspected threats as well as escalation to relevant stakeholders and partner functions including outcome management. The successful candidate will have 3+ years in cybersecurity and experience in conducting investigations, including forensics, applying risk assessment methodologies to uncover control gaps in business processes, applications, and assets. The candidate is expected to leverage relevant tools, data and analytics to independently conduct end-to-end insider threat investigations.</div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Key Responsibilities</H2> </div><div> Strategy <ul> <li style="color:black">Work with the Head of Insider Threat Defence to create long-term strategies for identifying and mitigating emerging insider risks.</li> <li style="color:black">Identify patterns and trends in insider threat incidents to inform strategic decision-making.</li> <li style="color:black">Continuously monitor user activity and system logs for suspicious behaviours using insider threat detection tools.</li> <li style="color:black">Analyse behavioural and digital data to identify high-risk individuals or activities.</li> <li style="color:black">Provide actionable insights to senior leadership, including quarterly and annual reports on program effectiveness.</li> </ul> Business <ul> <li style="color:black">Collaborate with HR, Legal, and IT teams to align insider threat policies with organizational goals and compliance requirements.</li> <li style="color:black">Facilitate cross-functional communication and ensure alignment on mitigation strategies.</li> <li style="color:black">Responsible for investigating a diverse range of insider incidents, including physical policy violations, data leaks, espionage, frauds, and theft of IP.</li> <li style="color:black">Gather and analyse evidence, conduct interviews, apply technical expertise to identify root cause(s) and present legally compliant, objective findings and recommendations to stakeholders at all levels. </li> <li style="color:black">Ensure compliance with regulatory requirements and internal policies during investigations and program development.</li> </ul> </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"></H2> </div><div> Processes <ul> <li style="color:black">Work with internal stakeholders to perform data correlation and enrichment across multiple sources (cyber, fraud, insider, physical, external threat intelligence).</li> <li style="color:black">Use AI-enabled analytics capabilities, including within platforms such as Databricks, to enhance, tune and drive insider threat detection use cases, including the development of risk indicators, detection logic and actionable insights.</li> <li style="color:black">Responsible for logging, prioritising and managing incidents reported by stakeholders and those received by the Insider Team via various channels. </li> <li style="color:black">Responsible for escalation of major incidents to the relevant stakeholders, ensuring proper communication and coordination throughout the incident resolution process. </li> <li style="color:black">Provide consultation on analysis of incident data to identify trends, recurring issues, and areas requiring improvement. </li> <li style="color:black">Consult, provide recommendations, and assist leadership in the design, implementation, and execution of solutions to achieve the objectives of the Insider Threat Team. </li> <li style="color:black">Consult the Head of Insider Threat in developing trends and insights based upon datasets to drive continual improvements. </li> <li style="color:black">Provide consultation to the Insider Team in support of creating the insider threat assessment framework, methodology, gather and report on security metrics that demonstrate the relative cost/benefit of the security operations and other cybersecurity initiatives. </li> </ul> </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"></H2> </div><div>People & Talent <ul> <li style="color:black">Foster a culture of excellence, mentorship, and continuous learning within the team.</li> <li style="color:black">Cultivate a collaborative and inclusive environment to maximize team productivity and effectiveness.</li> <li style="color:black">Lead through example and build the appropriate culture and values. Set appropriate tone and expectations from their team and work in collaboration with risk and control partners.</li> </ul> </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"></H2> </div><div>Risk Management <ul> <li style="color:black">Create operational plans and reports for business and functions in respect of Insider Threat Risk management.</li> <li style="color:black">Implement and oversee risk management protocols to minimize potential vulnerabilities.</li> <li style="color:black">Regularly assess the risk landscape and adapt strategies to address new and existing threats.</li> <li style="color:black">Conduct regular risk assessments to identify vulnerabilities and threats to the organization’s data.</li> <li style="color:black">Provide consultation in support of status reporting to senior management, relevant working groups and Committees. Responsible for escalation of any material blockers and impediments in a timely manner. </li> <li style="color:black">Develop and implement mitigation strategies to address identified risks.</li> <li style="color:black">Monitor and analyse security incidents to improve response strategies.</li> </ul> Governance Promote an environment where compliance with internal control functions and the external regulatory framework is a central priority of the service. </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"></H2> </div><div>Regulatory & Business Conduct <ul> <li style="color:black">Display exemplary conduct and live by the <a style="color:black" href="https://scsg.service-now.com/myhr?id=myhr_kb_article&sys_id=149f09cb87eff19082bb63d83cbb354b">Group’s Values and Code of Conduct</a>.</li> <li style="color:black">Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.</li> <li style="color:black">Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.</li> </ul> Key stakeholders <ul> <li style="color:black">Technology & Operations</li> <li style="color:black">Information & Cyber Security</li> <li style="color:black">Cybersecurity & Anti-crime Technology</li> <li style="color:black">Cyber Defence Centre</li> <li style="color:black">Insider threat Operations</li> <li style="color:black">Anti-crime Analytics</li> <li style="color:black">Group Threat Management</li> <li style="color:black">Data Loss Prevention</li> <li style="color:black">Fusion Technologies Working groups</li> <li style="color:black">CISO functions</li> <li style="color:black">Group Investigations</li> </ul> </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Skills and Experience</H2> </div><div> <ul> <li style="color:black">Advanced proficiency in, and understanding of, SIEM tools such as Splunk, including the ability to query, analyse and interpret security event data to support insider threat detection and investigations. Familiarity with UEBA solutions and data loss prevention (DLP) technologies is advantageous.</li> <li style="color:black">Working knowledge of insider threat platforms, such as Microsoft Purview Insider Risk Management, including the triage, assessment and handling of alerts generated by these platforms.</li> <li style="color:black">Familiarity with insider threat frameworks (e.g. MITRE, CERT), and knowledge of human-centric risk indicators.</li> <li style="color:black">Ability to write clear reports and communicate findings to technical and non-technical audiences.</li> </ul> Technical Competency: <ul> <li style="color:black">Knowledge of industry best practices and frameworks such as the NIST Cybersecurity Framework (CSF), MITRE ATT&CK, etc. </li> <li style="color:black">Strong SQL skills are required to query, analyse and interpret large datasets for insider threat detection and investigations. </li> <li style="color:black">Working knowledge of Databricks or similar analytics platforms is advantageous, including use of AI-enabled analytics features to enhance detection logic, identify anomalies and generate actionable insights.</li> <li style="color:black">Ability to use tools, data, and best practices to identify, assess, and manage potential Insider events as well as advise and guide others.</li> <li style="color:black">SIEMs (Splunk preferred), big data platforms (Databricks, Hadoop, etc.), and automation tools</li> </ul> </div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Qualifications</H2> </div><div> <ul> <li style="color:black">Degree or equivalent experience in digital forensics, insider threat investigation or significant work history in related roles.</li> <li style="color:black">3+ years of experience in cybersecurity, with at least 1 year focused on insider threat detection, behavioural analysis or threat hunting.</li> <li style="color:black">Cyber security certifications (e.g., CISSP, CISM, etc.), insider threat certifications (e.g., ITPM, GCITP, etc.), Incident Management, Forensics or Investigation-focused certifications will be advantageous. </li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">About Standard Chartered</H2> </div><div>We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us. Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion. Together we: <ul> <li>Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do</li> <li>Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well</li> <li>Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term</li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:14.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">What we offer</H2> </div><div>In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing. <ul> <li>Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.</li> <li>Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.</li> <li>Flexible working options based around home and office locations, with flexible working patterns.</li> <li>Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits</li> <li>A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.</li> <li>Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.</li> </ul></div></div></div>

Insider Threat Analyst (India, Malaysia) (Bangalore, IN)