Sr. Manager, Insider Risk & Digital Forensics

0101 The Huntington National Bank; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Huntington National Bank is seeking a Senior Manager to lead the Insider Risk and Digital Forensics program, shaping its strategy and day-to-day operations. You will partner with Cybersecurity, HR, Legal, Privacy, Risk, Compliance, and Technology to build intelligent, analytics-driven capabilities and ensure rigorous investigations with proper evidence handling.

The role emphasizes governance, program maturity, and executive-level reporting, while driving innovation and collaboration across

Qualifications

• 4+ years of experience in leading insider risk, DLP, cyber investigations, or threat management programs.
• 2+ years of experience with SIEM, UEBA, DLP, case management, and investigative technologies.
• 2+ years of experience leading teams and managing complex, high-impact investigations.
• Associate's Degree or 4+ additional years of equivalent experience.

Responsibilities

• Lead strategic direction, maturity, and execution of the enterprise Insider Threat Program.
• Develop multi-year insider risk roadmaps, operating models, governance structures, and performance metrics.
• Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics.
• Oversee investigations, triage, remediation, and closure of insider risk and digital forensics cases.
• Coordinate response with HR, Legal, Privacy, Risk Management, Compliance, and Technology teams.

Skills

Leadership

Strategic thinking

Cross-functional collaboration

Executive communication

Education

Associate's Degree

Bachelor's Degree

Tools

SIEM

UEBA

DLP

Case management

Investigative technologies

Job description

This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting).

Summary

The Senior Manager of Insider Risk and Digital Forensics is responsible for the strategic leadership, maturity, and day-to-day execution of the enterprise Insider Threat Program. This role leads the development of capabilities designed to identify, detect, investigate, and mitigate insider risk while protecting the organization's people, data, intellectual property, and critical assets. A successful candidate will partner across Cybersecurity, Human Resources, Legal, Privacy, Risk Management, Compliance, and Technology teams to establish a comprehensive, intelligence-driven insider risk program that leverages behavioral analytics, AI-driven detection capabilities, threat intelligence, and advanced monitoring technologies. This leader will oversee investigations, drive program innovation, and provide strategic guidance to executive leadership regarding emerging insider threats and associated business risks.

Duties and Responsibilities

Leadership & Strategy

• Lead the strategic direction, maturity, and execution of the enterprise Insider Threat Program.
• Develop and maintain multi-year insider risk roadmaps, operating models, governance structures, and performance metrics.
• Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics.
• Establish program objectives aligned with enterprise cybersecurity, risk management, legal, privacy, and regulatory requirements.
• Serve as the primary advisor to senior leadership on insider risk matters, emerging threats, and program effectiveness.

Insider Risk Operations & Investigations

• Lead a team responsible for the triage, investigation, remediation, and closure of insider risk and digital forensics investigations.
• Oversee complex investigations involving: Data exfiltration Intellectual property theft Unauthorized access Fraud Policy violations Misuse of privileged access
• Ensure investigations are conducted with forensic rigor, appropriate evidence handling, and chain-of-custody standards.
• Coordinate response activities and remediation efforts with HR, Employee Relations, Legal, Ethics, Privacy, Security, and Technology teams.

Detection Engineering & Analytics

• Design and enhance insider risk detection capabilities using: Security Information and Event Management (SIEM) User and Entity Behavior Analytics (UEBA) Data Loss Prevention (DLP) Threat Intelligence Platforms AI and advanced analytics solutions
• Develop behavioral analytics and risk scoring models to identify high-risk users and activities.
• Create and optimize detection use cases, monitoring processes, investigation workflows, and escalation procedures.
• Drive continuous improvement of detection accuracy and investigation efficiency.

AI & Emerging Threat Management

• Support the development of AI-enabled insider risk monitoring and detection strategies.
• Assess risks associated with generative AI, unauthorized AI usage, and emerging technology threats.
• Leverage advanced analytics to identify abnormal behavioral patterns and emerging insider threat indicators.
• Evaluate new technologies to enhance insider risk visibility, automation, and response capabilities.

Governance, Risk & Compliance

• Ensure insider risk controls align with enterprise governance and risk management frameworks.
• Incorporate industry best practices and frameworks, including: CERT Insider Threat Framework National Insider Threat Task Force (NITTF) Guidelines MITRE ATT&CK Framework
• Support regulatory examinations, audits, assessments, and compliance activities.
• Develop and maintain insider threat policies, standards, procedures, and playbooks.

Cross-Functional Collaboration

• Build strong partnerships with Human Resources, Legal, Privacy, Compliance, Enterprise Risk, Physical Security, and Technology leadership.
• Lead workshops, interviews, and process reviews to gather requirements and drive program improvements.
• Facilitate executive discussions related to insider risk events, trends, and strategic initiatives.
• Represent the organization in industry forums and working groups to benchmark capabilities and identify emerging best practices.

Reporting & Executive Communication

• Deliver executive-level reporting on: Program maturity Investigation outcomes Emerging risk trends Key performance indicators Regulatory and compliance considerations
• Translate technical findings into concise business-focused narratives for executives, auditors, and regulators.
• Present strategic recommendations and risk assessments to senior leadership.

Awareness & Culture

• Develop insider risk awareness and training programs.
• Promote a culture of security, accountability, and responsible data handling.
• Lead insider risk tabletop exercises and simulation activities to validate program readiness and response effectiveness.

Basic Qualifications

• 4+ years of experience in leading insider risk, DLP, cyber investigations, or threat management programs.
• 2+ years of experience with SIEM, UEBA, DLP, case management, and investigative technologies.
• 2+ years of experience leading teams and managing complex, high-impact investigations.
• Associate's Degree or 4+ additional years of equivalent experience.

Preferred Qualifications

• Strong understanding of insider threat methodologies, behavioral analytics, and cyber threat intelligence.
• Experience partnering with HR, Legal, Privacy, Compliance, and Risk functions.
• Financial services or highly regulated industry experience.
• Experience implementing AI-driven security monitoring and insider risk capabilities.
• Experience with digital forensics, incident response, and data protection technologies.
• Knowledge of privacy regulations, governance frameworks, and regulatory requirements.
• Strong written and verbal communication skills
• Bachelor's Degree or 4+ additional years of equivalent experience.

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay) Yes

Workplace Type: Office

Our Approach to Office Workplace Type

Our Approach to Office Workplace Type. Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Reasonable Accommodations

• Various methods will be used throughout the recruitment process to verify candidate authenticity. Any interviews conducted virtually must be joined from a distraction-free environment, with the candidate on camera and without the use of virtual backgrounds.

We endeavor to make this site accessible to any and all users.

If you would like to contact us regarding the accessibility of this site or if you require a reasonable accommodation to apply for a job or to perform the essential functions of the job, please send an email to [e-mail]

EEOC Disclaimer Know Your Rights CA Data Privacy CA Data Privacy Rights Tobacco Disclaimer Tobacco-Free Hiring Practice.

Welcome to Huntington! At Huntington, we look out for people. From reinventing banking with game-changing innovations to building an internal culture that creates lifelong bonds, together, we can make people’s lives better. And amazing things happen when we look out for each other. We prove it every day. Whether it’s helping a colleague or collaborating on a new tool that will revolutionize the way you save money, our actions can have a huge impact. Our colleagues look out for people with a Can-Do Attitude, Service Heart and Forward Thinking. Those are our values—simple but powerful. Each of them pushes us do the right thing, to do right by people. Because people are what matter.