Senior Insider Risk Strategy Consultant

Deloitte France; Jersey City (NJ); On-site; USD 125,000 - 208,000; Full time

Job summary

Deloitte is seeking a Senior Consultant in Cyber Defense & Resilience to help design and operate insider risk programs for clients. You will develop roadmaps, run investigations, and lead workshops with HR, Legal, Privacy, and Security to document business processes and program requirements.

You will implement detection use cases, monitor risk indicators, and align with CERT, NITTF, and MITRE frameworks while coordinating with cross-functional teams and maintaining strong client relationships.

Qualifications

• 3+ years of experience in insider risk, security operations, investigations, compliance, data protection, or enterprise risk management
• 1+ years of experience managing an insider risk program or conducting insider risk investigations and monitoring insider risk behaviors
• Experience using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention tools to support insider risk operations
• Experience developing insider risk procedures, playbooks, workflows, metrics, or governance models
• Experience working with cross-functional stakeholders such as Human Resources, Legal, Privacy, Ethics, or Security
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
• Limited immigration sponsorship may be available.

Responsibilities

• Assisting in developing comprehensive strategies for insider risk programs, including program assessments and roadmaps, using Deloitte's Insider Risk capability framework and industry practices
• Assisting in the operation of client insider risk programs, including the triage, analysis, investigation, and remediation of insider risk-related inquiries
• Leading client workshops, interviews, and process walkthroughs with cross-functional stakeholders, including Human Resources, Legal, Privacy, and Security, to document business processes, goals, and program requirements
• Aligning insider risk indicator and policy development with business needs and industry-leading standards, frameworks, and practices, including the CERT Insider Threat Framework, National Insider Threat Task Force guidelines, and MITRE ATT&CK for Enterprise
• Designing and implementing insider risk detection use cases, monitoring processes, and escalation workflows using Security Information and Event Management, User and Entity Behavior Analytics, and Data Loss Prevention capabilities
• Evaluating insider risk scenarios, high-risk user groups, and crown jewel assets to help clients prioritize and deploy monitoring, detection, response, and program management capabilities

Skills

Insider risk

Security operations

Investigations

Compliance

Data protection

Enterprise risk management

Education

Bachelor's degree or equivalent experience

Tools

Splunk UEBA

Proofpoint ITM

Microsoft Purview IRM

Zscaler DLP

Job description

Deloitte is seeking a Senior Consultant in Cyber Defense & Resilience to help design and operate insider risk programs for clients. You will develop roadmaps, run investigations, and lead workshops with HR, Legal, Privacy, and Security to document business processes and program requirements.

You will implement detection use cases, monitor risk indicators, and align with CERT, NITTF, and MITRE frameworks while coordinating with cross-functional teams and maintaining strong client relationships.