Senior Insider Risk Analyst: Detection, Analytics & Automation

Experian; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Discretionary bonus

Pension

Bupa healthcare

Sharesave scheme

25 days annual leave + 8 bank holidays

Job summary

Experian is seeking a Senior Insider Risk Analyst to lead and grow the global Insider Risk Management Program. You will enhance detection capabilities, develop use cases, automate processes and build dashboards for proactive threat prevention and data loss prevention.

The role is hybrid, based in Nottingham or London, with 40% in the office, and reports to the Insider Risk Director. Strong SIEM and scripting skills are essential.

Qualifications

• Demonstrated hands-on SIEM expertise with complex queries, dashboards and detections.
• Experience in insider risk, cybersecurity investigations or related security discipline.
• Experience using UEBA and DLP tools to mitigate insider threats.
• Scripting or programming to automate investigative workflows (Python/PowerShell).
• Experience correlating large datasets across multiple security technologies.
• Relevant certifications such as ITPM, GCITP, CISSP or GIAC/SANS preferred.

Responsibilities

• Analyze and interpret data from multiple sources to detect insider risk and data loss incidents.
• Provide technical expertise to investigations and respond to inquiries.
• Refine detection logic and analytics; reduce false positives and improve efficiency.
• Develop dashboards, queries and monitoring capabilities for investigations.
• Create automated workflows to streamline data correlation and reporting.
• Produce documentation including SOPs, flows and metrics across tools.
• Provide cross-coverage for Insider Risk and DLP governance activities.

Skills

SIEM expertise (YARA-L SPL KQL SQL)

Insider risk investigations

UEBA & DLP tools

Scripting (Python, PowerShell)

Data analytics on large datasets

Security dashboards & automation

Job description

Experian is seeking a Senior Insider Risk Analyst to lead and grow the global Insider Risk Management Program. You will enhance detection capabilities, develop use cases, automate processes and build dashboards for proactive threat prevention and data loss prevention.

The role is hybrid, based in Nottingham or London, with 40% in the office, and reports to the Insider Risk Director. Strong SIEM and scripting skills are essential.