Sr. Insider Risk Analyst

Cathay Bank in; El Monte (CA); On-site; USD 110,000 - 165,000; Full time

Job summary

Cathay Bank is seeking an experienced Insider Risk Analyst to strengthen our information security program. You will monitor insider-risk alerts, triage cases, and collaborate with HR, Legal, and IT to investigate and mitigate threats while ensuring privacy compliance.

This role requires 5+ years in insider threat or risk analysis, a relevant degree, and knowledge of DLP, UEBA, and risk frameworks. You will develop detection rules, train staff, and maintain thorough case documentation to protect

Qualifications

• Requires 5+ years in insider threat or insider risk, investigations, security operations, fraud, or risk analysis.
• Finance industry knowledge preferred.
• Experience with UAM/UBA concepts and tools is beneficial.
• Experience building narratives from multiple data sources to support mitigation actions.

Responsibilities

• Lead triage of insider-risk alerts and determine disposition according to procedures.
• Respond to DLP alerts and analyze events to identify data loss incidents.
• Lead investigations of insider threats including unauthorized access and data exfiltration.
• Regularly tune DLP and UEBA rules to reduce false positives and improve detection.
• Develop insider threat detection use cases, alert rules, and incident response playbooks.
• Prepare case documentation and coordinate with HR, Legal, or investigators when thresholds are met.

Skills

Stakeholder management

Active listening

Critical thinking

Creative problem-solving

Confidentiality

Documentation

Education

Undergraduate degree or equivalent experience

Behavioral Science/ Behavioral Analysis training

Tools

UAM tools

UBA tools

Rule engines

Data analytics platforms

Job description

Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank – we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members' drive and optimism. Together we can make a difference in the financial future of our communities.

What our team members are saying:

Our Information Security Team is responsible for identifying potential threats against the Bank and its workforce from internal and external threat actors and developing strategies to mitigate those threats to protect the Bank's reputation, workforce, clients, and assets.

The Insider Risk Analyst supports the Insider Risk Program by monitoring and triaging insider-risk alerts, conducting multi-source analysis to determine context and risk, and documenting findings for appropriate escalation. Additionally, the Insider Risk Analyst will assist in assessing exfiltration paths, tuning security tools and policies, and providing Information Security training and awareness to the organization. This role partners closely with Human Resources, Legal, other Information Security teams, and Information Technology to coordinate investigations, recommend mitigation actions, and help ensure activities are performed in accordance with data privacy, legal, and regulatory requirements.

ESSENTIAL FUNCTIONS

• Lead triage of insider-risk alerts generated by monitoring use cases and tools; validate activity, gather context, and determine appropriate disposition in accordance with approved procedures.
• Respond to DLP alerts, monitor DLP consoles and analyze security events to identify potential data loss incidents.
• Lead in-depth investigations of suspected insider threat incidents, including unauthorized access, data exfiltration, and policy violations.
• Regularly review and fine-tune DLP and UEBA rules/policies to reduce false positives and improve detection accuracy.
• Develop and implement insider threat detection use cases, alert rules, and incident response playbooks.
• Assess potential insider threats by evaluating the risks associated with users, data, and systems.
• Prepare clear case documentation and facilitate timely escalation or referral to investigators, HR, Legal, or other SMEs when thresholds are met; track outcomes and support coordination of mitigation actions.
• Lead interviews with the business units and monitor external intelligence sources for notable insider-risk indicators and emerging tactics; contribute to analysis of trends to inform detection tuning and response playbooks.
• Create and advocate for Team Member training and awareness on cybersecurity risks and best practices; design and track phishing simulation campaigns.
• Support program governance by authoring documentation (e.g., procedures, roles and responsibilities, and control evidence) and by adhering to the established control environment.
• Collaborate with stakeholders across the Bank and, as applicable, with external partners to stay abreast of industry trends and best practices in insider-risk monitoring, investigations, and privacy-aligned analytics.

QUALIFICATIONS

Education:

• Undergraduate degree in Intelligence Studies, Forensic Science, Security Studies, Computer Science, Cybersecurity, Data Analysis or a related field or equivalent experience.
• Behavioral Science/ Behavioral Analysis/Behavioral Threat Assessment experience or training preferred.

Experience:

• Minimum 5+ years of work experience supporting insider threat/insider risk, investigations, security operations, fraud, or risk analysis.
• Preferred experience in or knowledge of financial industry.
• Experience in or knowledge of fraud.
• Preferred experience with User Activity Monitoring (UAM), User Behavior Analytics (UBA) principles and tools, rules and policy engines, other insider threat technical solutions and data analytics platforms.
• Preferred experience supporting an insider threat/risk program or investigative team by assessing complex events, building narratives from multiple data sources, and recommending mitigation actions in coordination with cross-disciplinary partners.
• Preferred experience conducting risk assessments and in-depth multi-source research on threat actors, tactics, techniques, and emerging trends to inform risk scenarios, evaluate control environment and develop mitigation strategies.

Skills/Ability:

• Demonstrates the ability to work effectively with a diverse range of stakeholders across various levels of the organization.
• Applies foundational elicitation skills, including building rapport, active listening, and asking thoughtful, open-ended questions to gather information.
• Utilizes strong critical thinking skills to analyze information, solve problems, and make informed decisions.
• Exhibits creativity in approaching challenges and developing innovative solutions.
• Maintains a high level of confidentiality and exercises sound judgment and discretion when handling sensitive information.
• Ability to build successful and sustainable relationships across all lines of business and with technical partners to develop solutions
• Ability to manage multiple cases and priorities simultaneously, meet deadlines, and maintain thorough, well-organized documentation
• Demonstrates analytical rigor and creativity to solve complex problems, identify meaningful patterns in data, and deliver practical, risk-based recommendations.

Technical:

• Knowledge of DLP — network, endpoint, cloud; as one data source in the ecosystem
• Knowledge of OSINT concepts — collection, managed attribution, legal boundaries
• Knowledge of MITRE ATT&CK — TTPs mapped to insider threat scenarios
• Awareness of privacy law constraints on monitoring (CCPA, state laws)
• Knowledge of insider threat laws and regulations
• Knowledge of networking (TCP/IP, DNS, DHCP, HTTP/S)
• Knowledge of risk management processes and frameworks
• Knowledge of OS fundamentals — user activity logs, file systems, process behavior
• Knowledge of IP addressing, DNS resolution, basic network flow logs
• Knowledge of CMU threat categories: IP theft, sabotage, fraud, espionage, unintentional
• Knowledge of information collection tools and techniques

ON-GOING TRAINING