Vista previa generada por IA
Insider Threat Analyst role in Malaysia or India – join Standard Chartered’s cybersecurity team.
Lead investigations and manage insider risk events as part of an emerging Cybersecurity & Anti‑Crime Technology unit.
Job Summary
This role could be based in Malaysia or India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.
Ready to take the next step in your career with us?
- To us, good performance is about much more than turning a profit. It's about showing how you embody our valued behaviours - do the right thing, better together and never settle - as well as our brand promise, here for good.
- We're committed to promoting equality in the workplace and creating an inclusive and flexible culture - one where everyone can realise their full potential and make a positive contribution to our organisation. This in turn helps us to provide better support to our broad client base.
About the team
The Insider Threat Defence Team (part of the Cybersecurity & Anti-Crime Technology function within Technology & Operations) is a relatively new team, which has started to make a big impact. The team works with stakeholders and peers across the Bank to detect, investigate and manage events which may harm the Bank or its’ assets.
About the role
We now need an Insider Threat Investigator to help us grow further.
In this role, you will be responsible for leading the day-to-day efforts to identify and assess insider risks, threats, and events as well as help identify control weaknesses and drive control enhancements across a wide variety of business and functions at Standard Chartered. As a senior specialist in the team you will be involved in complex investigations and surveillance of known or suspected threats as well as escalation to relevant stakeholders and partner functions including outcome management.
The successful candidate will have experience in conducting investigations, including forensics, applying risk assessment methodologies to uncover control gaps in business processes, applications, and assets. The candidate is expected to leverage relevant tools, data and analytics to independently conduct end-to-end insider threat investigations.
Key Responsibilities
Strategy
- Work with the Head of Insider Threat Defence to create long-term strategies for identifying and mitigating emerging insider risks. .
- Identify patterns and trends in insider threat incidents to inform strategic decision-making.
- Continuously monitor user activity and system logs for suspicious behaviours using insider threat detection tools.
- Analyse behavioural and digital data to identify high-risk individuals or activities.
- Provide actionable insights to senior leadership, including quarterly and annual reports on program effectiveness.
Business
- Collaborate with HR, Legal, and IT teams to align insider threat policies with organizational goals and compliance requirements.
- Facilitate cross-functional communication and ensure alignment on mitigation strategies.
- Responsible for investigating a diverse range of insider incidents, including physical policy violations, data leaks, espionage, frauds, and theft of IP. Gather and analyze evidence, conduct interviews, apply technical expertise to identify root cause(s) and present legally compliant, objective findings and recommendations to stakeholders at all levels.
- Ensure compliance with regulatory requirements and internal policies during investigations and program development.
Processes
- Support the configuration, maintenance and ongoing refinement of insider risk detection workflows, including policy logic, risk indicators, alert thresholds and case triage processes, using relevant enterprise platforms such as Microsoft Purview Insider Risk Management where applicable.
- Support the development, maintenance and continuous improvement of insider threat dashboards and data visualisations to enable risk reporting, trend analysis, case oversight and management decision making.
- Responsible for logging, prioritising and managing incidents reported by stakeholders and those received by the Insider Team via various channels.
- Responsible for escalation of major incidents to the relevant stakeholders, ensuring proper communication and coordination throughout the incident resolution process.
- Provide consultation on analysis of incident data to identify trends, recurring issues, and areas requiring improvement.
- Consult, provide recommendations, and assist leadership in the design, implementation, and execution of solutions to achieve the objectives of the Insider Threat Team.
- Consult the Head of Insider Threat in developing trends and insights based upon datasets to drive continual improvements.
- Provide consultation to the Insider Team in support of creating the insider threat assessment framework, methodology, gather and report on security metrics that demonstrate the relative cost/benefit of the security operations and other cybersecurity initiatives.
- Consult the Head of Insider Threat in developing trends and insights based upon datasets to drive continual improvements.
People and Talent
- Foster a culture of excellence, mentorship, and continuous learning within the team.
- Cultivate a collaborative and inclusive environment to maximize team productivity and effectiveness.
- Lead through example and build the appropriate culture and values. Set appropriate tone and expectations from their team and work in collaboration with risk and control partners.
Risk Management
- Create operational plans and reports for business and functions in respect of Insider Threat Risk management.
- Implement and oversee risk management protocols to minimize potential vulnerabilities.
- Regularly assess the risk landscape and adapt strategies to address new and existing threats.
- Conduct regular risk assessments to identify vulnerabilities and threats to the organization’s data.
- Provide consultation in support of status reporting to senior management, relevant working groups and Committees. Responsible for escalation of any material blockers and impediments in a timely manner.
- Develop and implement mitigation strategies to address identified risks.
- Monitor and analyse security incidents to improve response strategies.
Governance
- Promote an environment where compliance with internal control functions and the external regulatory framework is a central priority of the service.
Regulatory and Business Conduct
- Display exemplary conduct and live by the Group’s Values and Code of Conduct.
- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
- Effectively and collaboratively identify, elevate, mitigate and resolve risk, conduct and compliance matters
Key stakeholders
- Technology & Operations
- Information & Cyber Security
- Cybersecurity & Anti-crime Technology
- Cyber Defence Centre
- Insider threat Operations
- Anti-crime Analytics
- Group Threat Management
- Data Loss Prevention
- Fusion Working groups
- CISO functions & Group Investigations
Skills and Experience
3+ years of experience in cybersecurity, with at least 1 year focused on insider threat detection, behavioural analysis or threat hunting.
Working knowledge of insider threat platforms (e.g. Microsoft Purview Insider Risk Management), including configuring policies, tuning risk indicators and alerts, and optimising tool workflows to support effective investigations
Proficiency in SIEM tools (e.g. Splunk), UEBA solutions and data loss prevention (DLP) technologies
Familiarity with insider threat frameworks (e.g. MITRE, CERT), and knowledge of human-centric risk indicators.
Ability to write clear reports and communicate findings to technical and non-technical audiences.
Microsoft Purview Insider Risk Management and PowerBI
Technical Competency:
Knowledge of industry best practices and frameworks such as the NIST Cybersecurity Framework (CSF), MITRE ATT&CK, etc.
Experience developing data visualisation dashboards (e.g. Power BI) to support risk reporting and management insights would be advantageous.
Ability to use tools, data, and best practices to identify, assess, and manage potential Insider events as well as advise and guide others.
Hands‑on experience with insider threat tools, such as Microsoft Purview Insider Risk Management, and relevant Microsoft security platforms to support investigation, detection and risk management activities.
Qualifications
Education: Degree or equivalent experience in digital forensics, insider threat investigation or significant work history in related roles.
Cyber security certifications (e.g., CISSP, CISM, etc.), insider threat certifications (e.g., ITPM, GCITP, etc.), Incident Management, Forensics or Investigation-focused certifications will be advantageous.
Competencies
Action Oriented
Collaborates
Customer Focus
Gives Clarity & Guidance
Manages Ambiguity
Develops Talent
Drives Vision & Purpose
Nimble Learning
Decision Quality
Courage
Instills Trust
Strategic Mindset
Technical Competencies: This is a generic competency to evaluate candidate on role-specific technical skills and requirements
About Standard Chartered
We’re an international bank, nimble enough to act, big enough for impact. For more than 170 years, we’ve worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you’re looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can’t wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you’ll see how we value difference and advocate inclusion.
Together we:
Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
Flexible working options based around home and office locations, with flexible working patterns.
Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Information at a Glance
Visit our careers website www.sc.com/careers
Similar Jobs
Similar Jobs
Insider Threat Analyst (India, Malaysia)
Technology
Requisition Number 57400
Director, BBD Sales
Singapore, SGP
Financial Markets
Requisition Number 58013
Singapore
Associate Director, Markets, Operational Client Relationship Management
Tokyo, JPN
Operations
Requisition Number 52321
Japan
Senior Insider Threat Investigator
Singapore, SGP
Technology
Requisition Number 57411
Singapore
Job Skills
Job Skills
Key Skills
Organization Development
Strategic Thinking
Fact-Finding
Strategic Management
Relevant Skills
Data Logging
Incident Management
Self Motivation
Maintenance
Innovation
IT Portfolio Management
Collaborative Communications
Geography
Dashboards
Espionage
Continuous Training
Digital Data
Crisis Management
Show Courage
Risk Analysis
Microsoft Security Essentials
Service Orientation
Leadership
Workflows
Power BI
Business Processes
Cyber Security
Mental Health
Internal Accounting Controls
Business Process Improvement
Information Leak Prevention
Carrying out Assessments
Hard Work and Dedication
Knowledge of Finance
Trend Analysis
Disk Controller
Behavioral Analysis
Regulatory Requirements
Data Visualization
Team Working
Regulatory Compliance
Insider Threat
Digital Forensics
Communication Skills
Criminal Justice
Recruitment
Perseverance
Data Analytics
Security Information and Event Management
Metrics
Mitre Att&ck
Threat Management