Sr. Manager, Insider Risk & Digital Forensics

Huntington National Bank; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Huntington National Bank seeks a Senior Manager of Insider Risk and Digital Forensics to lead the enterprise Insider Threat Program across Cybersecurity, HR, Legal, Privacy, and Risk teams. The role focuses on detecting, investigating, and mitigating insider risk using behavioral analytics, AI-driven detection, and advanced monitoring technologies.

The candidate will oversee investigations, drive program innovation, and advise executives on emerging threats and risk.

Qualifications

• 4+ years of experience in leading insider risk, DLP, cyber investigations, or threat management programs.

Responsibilities

• Lead the strategic direction, maturity, and execution of the enterprise Insider Threat Program.
• Develop and maintain multi-year insider risk roadmaps, operating models, governance structures, and performance metrics.
• Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics.
• Establish program objectives aligned with enterprise cybersecurity, risk management, legal, privacy, and regulatory requirements.
• Serve as the primary advisor to senior leadership on insider risk matters, emerging threats, and program effectiveness.
• Lead a team responsible for the triage, investigation, remediation, and closure of insider risk and digital forensics investigations.
• Oversee complex investigations involving high-impact cases with forensic rigor and proper chain-of-custody.
• Coordinate response activities with HR, Legal, Privacy, Compliance, and Technology teams.
• Design and enhance insider risk detection capabilities using behavioral analytics and risk scoring models.
• Create and optimize detection use cases, monitoring processes, investigation workflows, and escalation procedures.
• Drive continuous improvement of detection accuracy and investigation efficiency.
• Support the development of AI-enabled insider risk monitoring strategies.
• Assess risks associated with generative AI and emerging technology threats.
• Evaluate new technologies to enhance insider risk visibility, automation, and response capabilities.

Skills

Communication skills

Leadership

Insider threat methodologies

AI-driven security monitoring

Regulatory knowledge

Education

Bachelor’s Degree

Associate’s Degree

Tools

SIEM

UEBA

DLP

Case management

Digital forensics tools

Job description

Description

This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting)

Summary:

The Senior Manager of Insider Risk and Digital Forensics is responsible for the strategic leadership, maturity, and day-to-day execution of the enterprise Insider Threat Program. This role leads the development of capabilities designed to identify, detect, investigate, and mitigate insider risk while protecting the organization’s people, data, intellectual property, and critical assets.

A successful candidate will partner across Cybersecurity, Human Resources, Legal, Privacy, Risk Management, Compliance, and Technology teams to establish a comprehensive, intelligence-driven insider risk program that leverages behavioral analytics, AI-driven detection capabilities, threat intelligence, and advanced monitoring technologies. This leader will oversee investigations, drive program innovation, and provide strategic guidance to executive leadership regarding emerging insider threats and associated business risks.

Duties and Responsibilities:

Leadership & Strategy

• Lead the strategic direction, maturity, and execution of the enterprise Insider Threat Program.

• Develop and maintain multi-year insider risk roadmaps, operating models, governance structures, and performance metrics.

• Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics.

• Establish program objectives aligned with enterprise cybersecurity, risk management, legal, privacy, and regulatory requirements.

• Serve as the primary advisor to senior leadership on insider risk matters, emerging threats, and program effectiveness.

Insider Risk Operations & Investigations

• Lead a team responsible for the triage, investigation, remediation, and closure of insider risk and digital forensics investigations.

• Oversee complex investigations involving:

• Ensure investigations are conducted with forensic rigor, appropriate evidence handling, and chain-of-custody standards.

• Coordinate response activities and remediation efforts with HR, Employee Relations, Legal, Ethics, Privacy, Security, and Technology teams.

Detection Engineering & Analytics

• Design and enhance insider risk detection capabilities using:

• Develop behavioral analytics and risk scoring models to identify high-risk users and activities.

• Create and optimize detection use cases, monitoring processes, investigation workflows, and escalation procedures.

• Drive continuous improvement of detection accuracy and investigation efficiency.

AI & Emerging Threat Management

• Support the development of AI-enabled insider risk monitoring and detection strategies.

• Assess risks associated with generative AI, unauthorized AI usage, and emerging technology threats.

• Leverage advanced analytics to identify abnormal behavioral patterns and emerging insider threat indicators.

• Evaluate new technologies to enhance insider risk visibility, automation, and response capabilities.

Governance, Risk & Compliance

• Ensure insider risk controls align with enterprise governance and risk management frameworks.

• Incorporate industry best practices and frameworks, including:

• Support regulatory examinations, audits, assessments, and compliance activities.

• Develop and maintain insider threat policies, standards, procedures, and playbooks.

Cross-Functional Collaboration

• Build strong partnerships with Human Resources, Legal, Privacy, Compliance, Enterprise Risk, Physical Security, and Technology leadership.

• Lead workshops, interviews, and process reviews to gather requirements and drive program improvements.

• Facilitate executive discussions related to insider risk events, trends, and strategic initiatives.

• Represent the organization in industry forums and working groups to benchmark capabilities and identify emerging best practices.

Reporting & Executive Communication

• Deliver executive-level reporting on:

• Translate technical findings into concise business-focused narratives for executives, auditors, and regulators.

• Present strategic recommendations and risk assessments to senior leadership.

Awareness & Culture

• Develop insider risk awareness and training programs.

• Promote a culture of security, accountability, and responsible data handling.

• Lead insider risk tabletop exercises and simulation activities to validate program readiness and response effectiveness.

Basic Qualifications:

• 4+ years of experience inleading insider risk, DLP, cyber investigations, or threat management programs.

• 2+ years of experience with SIEM, UEBA, DLP, case management, and investigative technologies.

• 2+ years of experience leading teams and managing complex, high-impact investigations.

• Associate’s Degree or 4+ additional years of equivalent experience.

Preferred Qualifications:

• Strong understanding of insider threat methodologies, behavioral analytics, and cyber threat intelligence.

• Experience partnering with HR, Legal, Privacy, Compliance, and Risk functions.

• Financial services or highly regulated industry experience.

• Experience implementing AI-driven security monitoring and insider risk capabilities.

• Experience with digital forensics, incident response, and data protection technologies.

• Knowledge of privacy regulations, governance frameworks, and regulatory requirements.

• Strong written and verbal communication skills

• Bachelor’s Degree or 4+ additional years of equivalent experience.

Exempt Status: (Yes= not eligible for overtime pay) ( No = eligible for overtime pay)

Yes

Workplace Type:

Office

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington’s Career Web Site for more details.