Sr. Insider & Data Risk Analyst

Jobgether; Portugal; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Stock options

Health benefits

Home-office allowance 500 USD

Brex Card stipend 150 USD monthly

Global distributed team

AI/fintech exposure

Diversity & equal opportunity

Job summary

Jobgether is seeking a Sr. Insider & Data Risk Analyst in Portugal to protect sensitive information and personnel. You will own complex investigations from triage through resolution, maturing insider risk processes, and applying AI to security challenges.

You will partner with HR, Legal, Compliance, Engineering, IT, and Security on highly sensitive cases requiring discretion. The role spans cybersecurity, data protection, privacy, and regulated finance, with opportunities to automate

Qualifications

• 4+ years in insider risk, DLP, digital forensics, or related security fields.
• Hands-on investigations leadership and case management experience.
• Experience with workflow automation, AI, or SOAR platforms.
• Knowledge of data classification, governance, and information security.
• Familiarity with GDPR, ISO 27001, SOC 2 and privacy regulations.
• Strong written and verbal communication; executive report writing.

Responsibilities

• Own insider risk investigations from triage to closure with timelines.
• Mature risk management processes and scalable case workflows.
• Operate and tune DLP across SaaS endpoints to reduce false positives.
• Investigate data exfiltration, policy violations, and access issues.
• Collaborate with HR, Legal, Compliance, Eng, IT, and Security on cases.
• Lead risk assessments and maintain risk registers; mentor colleagues.
• Support audits and regulatory requirements related to data protection.

Skills

Insider risk

Data Loss Prevention

Digital forensics

Security investigations

Scripting (Python/SQL)

Cloud platforms

Governance & compliance

Communication

Threat analytics

Executive reporting

Tools

Elastic/ELK

Splunk

SOAR

SIEM

Job description

Sr. Insider & Data Risk Analyst

Empresa : Jobgether Tipo de Emprego : Periodo Integral Portugal JobCopilot will tailor your resume and auto-fill the application

This is a senior individual contributor role focused on protecting sensitive information, systems, and people from insider and data-loss risks. You will own complex investigations from initial triage through resolution while helping mature insider risk management and Data Loss Prevention capabilities. The role sits at the intersection of cybersecurity, data protection, privacy, and regulated financial services. You will work closely with People/HR, Legal, Compliance, Engineering, IT, and Security teams on highly sensitive cases requiring discretion and sound judgment. The position also offers an opportunity to strengthen risk processes, automate investigations, and apply AI to emerging security challenges. Success requires a highly organized professional who can translate complex findings into clear recommendations for both technical teams and leadership.

Accountabilities

• Own insider risk investigations from initial triage through closure, including establishing case timelines, coordinating containment and escalation, documenting determinations, and capturing lessons learned.
• Mature the Insider Risk Management Program by developing scalable case-management processes, risk-tiering methodologies, investigation standards, and repeatable workflows.
• Operate, monitor, and tune Data Loss Prevention capabilities across SaaS applications, endpoints, and other environments, improving detection quality while reducing false positives.
• Investigate potential data exfiltration, misuse, policy violations, and inappropriate access involving source code, cloud platforms, collaboration tools, third-party applications, and critical business or trading systems.
• Strengthen data classification and governance practices while aligning DLP controls with information sensitivity and business risk.
• Assess risks associated with unauthorized AI and agentic tooling, including potential exposure of sensitive or proprietary information through approved and unsanctioned AI applications.
• Use workflow automation, AI, and security orchestration capabilities to improve alert triage, investigation efficiency, and the overall maturity of insider risk processes.
• Lead insider risk and data protection assessments, maintain risk registers, and track remediation activities and emerging threats.
• Partner with People/HR, Legal, Compliance, Engineering, IT, and Security on sensitive personnel cases, departures, policy violations, and data-handling concerns with a high level of discretion and care.
• Support internal and external audits, regulatory requirements, and security assurance activities related to insider risk, data protection, privacy, and information security.
• Contribute insider risk and secure data-handling content to security awareness and employee training programs.
• Serve as a senior escalation point for insider risk cases and mentor colleagues on investigation methodologies, case management, and effective risk analysis.
• Monitor developments in insider risk, data protection, privacy, cybersecurity, and financial services regulation to identify opportunities for continuous improvement.

Requirements:

• 4+ years of professional experience in insider risk, Data Loss Prevention, digital forensics, security investigations, or a closely related discipline.
• Demonstrated hands-on experience leading sensitive investigations and managing cases involving personnel matters, data misuse, policy violations, or potential exfiltration.
• Practical experience operating and tuning DLP solutions across SaaS and endpoint environments, with an understanding of detection quality and false-positive reduction.
• Experience with workflow automation, AI, or SOAR platforms for alert triage, investigation support, and case orchestration.
• Strong understanding of data classification, data governance, data protection, and information security principles.
• Working knowledge of SIEM platforms and log analysis, such as Elastic/ELK or Splunk, to support investigations and establish evidence-based conclusions.
• Familiarity with security and compliance frameworks including NIST CSF, ISO 27001, SOC 2, and privacy regulations such as GDPR and APPI.
• Strong written and verbal communication skills, with the ability to produce clear investigation reports, case documentation, risk assessments, and executive summaries.
• Exceptional integrity, discretion, and judgment when handling confidential personnel, customer, business, and security information.
• Strong organizational skills and attention to detail, with the ability to manage multiple sensitive investigations in a fast-paced, distributed environment.
• Ability to collaborate effectively with People/HR, Legal, Compliance, Engineering, IT, and Security stakeholders.
• Experience with digital forensics, eDiscovery, UEBA, insider risk platforms, security operations, or incident response is an advantage.
• Scripting or automation experience using technologies such as Python or SQL is a plus.
• Experience with major cloud platforms and familiarity with supporting SOC 2, ISO 27001, or regulatory audits is beneficial.
• Exposure to fintech, financial services, trading platforms, or regulated environments is strongly valued.
• Relevant certifications such as GCFA, GCFE, CISSP, CISM, CIPP, CFE, or equivalent are considered a plus.
• Familiarity with financial services regulatory expectations and multi-jurisdiction privacy requirements is advantageous.
• A genuine interest in AI-related data risk and using emerging AI capabilities to improve security operations and investigation workflows.

Benefits:

• Competitive salary and stock options.
• Health benefits.
• One-time USD $500 new-hire home-office setup allowance.
• USD $150 monthly stipend through a Brex Card.
• Opportunity to work within a globally distributed team spanning multiple countries and time zones.
• Exposure to cutting-edge cybersecurity, financial technology, cloud infrastructure, AI, and data protection challenges.
• An inclusive environment committed to diversity and equal opportunity.