Senior Insider Risk & Data Protection Analyst

Alpaca; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive Salary & Stock Options

Health Benefits

New Hire Home-Office Setup: USD $500

Monthly Stipend: USD $150 per month

Job summary

Alpaca seeks a Senior Insider & Data Risk Analyst to own investigations spanning insider risk and data protection. You will partner with HR, Legal, Compliance, Engineering, and IT to manage sensitive cases, refine DLP controls, and mature the risk program across multiple environments.

Reporting to the Cyber GRC Lead, you will translate risk into clear leadership language, maintain durable processes, and handle data with discretion in a regulated fintech context. Prior experience is highly valued.

Qualifications

• 4+ years in insider risk, DLP operations, digital forensics, or security investigations
• Hands-on experience leading investigations with discretion on sensitive personnel matters
• Hands-on experience operating DLP in SaaS and endpoint environments
• Experience with workflow automation, AI, or SOAR platforms for alert triage and case orchestration
• Strong understanding of data classification and data governance
• Working knowledge of SIEM and log analysis to support investigations
• Familiarity with frameworks such as NIST CSF, ISO 27001, SOC 2, and privacy regulations (GDPR, APPI)
• Strong written communication and executive summaries
• High integrity and discretion in handling confidential information
• Ability to work across People/HR, Legal, Compliance, Engineering, and IT

Responsibilities

• Own insider risk investigations from triage through closure with timelines, containment, escalation, and determinations
• Mature Insider Risk Management Program with case management processes and repeatable workflows
• Operate and tune DLP tooling across multiple environments to refine rules and reduce false positives
• Mature data classification and align DLP controls to sensitivity levels
• Investigate data exfiltration, misuse, and policy violations; build detections and monitoring
• Collaborate with People/HR, Legal, Compliance, and IT on sensitive cases with discretion
• Assess risk from unauthorized AI/tools and data exposure through approved/unsanctioned AI tooling
• Leverage AI to mature the insider risk program
• Lead insider and data risk assessments and maintain risk registers
• Support internal and external audits and regulatory requirements
• Contribute insider risk content to security awareness and training
• Serve as escalation point for Security and mentor others on investigations
• Monitor developments in insider risk, data protection, privacy, and financial services regulation

Skills

Insider risk investigations

Data Loss Prevention (DLP)

SaaS/endpoint DLP tuning

Workflow automation / SOAR

Data classification

SIEM / log analysis (ELK, Splunk)

Regulatory frameworks (NIST, ISO 27001

Executive reporting / documentation

Discretion & integrity

Cross-functional collaboration

Tools

ELK/Elastic

Splunk

SOAR platforms

Job description

Alpaca seeks a Senior Insider & Data Risk Analyst to own investigations spanning insider risk and data protection. You will partner with HR, Legal, Compliance, Engineering, and IT to manage sensitive cases, refine DLP controls, and mature the risk program across multiple environments.

Reporting to the Cyber GRC Lead, you will translate risk into clear leadership language, maintain durable processes, and handle data with discretion in a regulated fintech context. Prior experience is highly valued.