Insider Risk Program Coordinator

Control Risks; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Control Risks seeks an Insider Risk Program Coordinator to drive the Bank's Insider Risk Management Program. You will ensure high-quality policy, process, and investigative deliverables while serving as the primary referent for the program.

The role requires a strong background in insider threat technologies, regulatory standards, investigations, cybersecurity, and cross-functional leadership across Europe.

Qualifications

• Bachelor’s degree in a related field.
• 6+ years of experience in cyber and information security, with insider threat, investigations, and/or forensic analysis.
• 2+ years in insider risk technologies (UEBA, data analytics, SIEM/SOC).
• Experience with European financial services regulatory environment.
• Strong communication and cross-functional collaboration skills.

Responsibilities

• Support development and implementation of an enterprise operating model for insider risk.
• Assist with insider risk technology platforms, including UEBA design/deployment.
• Advise on metrics, KPIs, and reporting for program effectiveness.
• Ensure insider threat strategies align with security and compliance goals.
• Coordinate with cybersecurity, HR, legal, compliance, and risk teams to develop prevention and detection strategies.
• Continuously improve insider risk methodologies and workflows.
• Produce regular briefings, reports, and recommendations to senior leadership.
• Maintain confidentiality and professionalism in all activities.

Skills

Cyber security

Insider threat

Data analytics

UEBA

SIEM/SOC

Threat hunting

Incident response

Forensic analysis

Regulatory knowledge

Stakeholder management

Education

Bachelor's degree

Tools

UEBA platforms

Data protection controls

Job description

A global bank headquartered in Europe is seeking an Insider Risk Program Coordinator to help drive the success of the Bank’s Insider Risk Management Program. Working as part of the team and reporting into Insider Risk program lead, this role will ensure high-quality policy, process, workflow, investigative, and analytical deliverables, and serve as the primary referent for the Bank’s program. The ideal candidate will have a strong background in insider risk technologies (especially analytic technologies such as UEBA systems and data protection controls), processes, regulatory standards, investigations, cybersecurity, and team management, with the ability to effectively collaborate with stakeholders across multiple functions. This experience should include knowledge of and experience with EU Works Councils’ expectations and processes. The ideal candidate will also have experience in a European Global Systemically Important Financial Institution, having served in a cybersecurity, enterprise security, or financial crimes/fraud management role.

Responsibilities include, but are not limited to:

• Support development, coordination, socialization, and implementation of an enterprise operating model with supporting policies, processes, technology integration, and workflows for preventing, detecting, investigating, and mitigating insider risks.
• Support development and implementation of insider risk technology platforms, especially but not limited to design and deployment of a UEBA platform.
• Advise and support management of metrics, KPIs and report enhancements to measure the effectiveness of the program.
• Ensure insider threat detection, analysis, and mitigation strategies align with the Firm's overall security and compliance objectives.
• Coordinate efforts with the Firm’s cybersecurity, security, HR, legal, compliance, threat management and risk management teams, to develop proactive insider threat prevention and detection strategies.
• Continuously assess and enhance insider risk methodologies, workflows, and technologies to optimize effectiveness.
• Produce regular high-quality briefings, reports, and recommendations to senior leadership and key stakeholders.
• Maintain strict confidentiality and professionalism in all operational and advisory activities.

Essential

• Bachelor’s degree in a related field.
• 6+ years of experience in cyber and information security, with extensive hands-on experience in insider threat, incident response, threat hunting, and/or forensic analysis.
• 2+ years of demonstrated experience in insider risk management-related technologies, especially UEBA, data analytics, writing detection signatures, or enhancing SIEM/SOC processes.
• Experience and knowledge of the European financial services regulatory environment.
• Strong understanding of cybersecurity principles and behavioural analytics.
• Excellent written and oral communication and interpersonal skills, with the ability to engage effectively with senior leadership and cross-functional teams.

Preferred

• 5+ years of experience in a global systemically important financial institution.
• Experience developing and producing Legitimate Interest Assessments and Data Protection Impact Assessments in support of EU and Work Council regulatory compliance.
• Advanced industry certifications, such as GCIA, GCIH, GCFA, CISSP, or equivalent.

Solutions focussed

• AI-native User Entity Behavioural Analytics
• SIEM / SOAR platforms
• Data analytics platforms
• Data Loss Prevention
• Identity and Access Management
• Network Segmentation

Client-centric

• Uses own and wider knowledge and contributes to others to enable and make sound judgements that impact the client and team
• Anticipates client needs and addresses these
• Provides the best possible services to clients, ensuring the client is at the heart of everything we do

One Firm

• Builds strong relationships thought common goals, individual contribution and support in times of need
• Considers the regional and global implications of what we do in our own areas of responsibility or team/department

All employees are expected to display behaviours reflective of our company values: Integrity and Ethics, Collaboration and Teamwork, Commitment to People and Professionalism and Excellence.