Match score not available

Cybersecurity - Insider Threat Analyst (L1)

Remote:

Full Remote

Work from:

Portugal

Offer summary

Qualifications:

Experience with Microsoft Purview DLP, Knowledge of Insider Threat and Data Loss Prevention, Proficiency in cybersecurity tools, Experience in analysis and monitoring.

Key responsabilities:

Monitor and triage Insider Threat alerts
Collaborate with Global Security Operations Centre

WTW Financial Services https://www.wtwco.com/

10001 Employees

See all jobs

Job description

About WTW:

At WTW, we're more than just an advisory, broking, and solutions company – we’re a catalyst for turning risk into opportunity. Our award-winning expertise spans nearly two centuries, guiding iconic moments in history from insuring the Titanic in 1912 to supporting the Moon Buggy mission in 1971. Today, we continue to help clients worldwide pave the way for growth and success.

Our Lisbon-based Regional Delivery Hub is home to a diverse, global team of over 175 professionals, delivering operational excellence through innovative, streamlined solutions every day.

The Opportunity:

We’re on the lookout for passionate, driven individuals to join our Cyber Security team at WTW. We have an exciting opportunity for an experienced L1 Insider Threat Analyst who will play a key role in safeguarding our organization’s data and reputation. If you're looking for a chance to make a meaningful impact in a dynamic, global company, this role is for you.

Your Role as an L1 Insider Threat Analyst:

As part of the Cyber Defence team, you’ll be on the front lines of protecting WTW from insider threats. You’ll monitor and triage Insider Threat and Data Loss Prevention (DLP) alerts, ensuring that potential risks are quickly identified and escalated when necessary. Reporting to the L1 Insider Threat Manager, you'll bring your expertise in Microsoft Purview DLP to help us maintain a strong security posture.

Your Main Responsibilities:

Perform detailed analysis and triage of Insider Threat and DLP alerts across various channels in both cloud and on-premise environments.
Use cutting-edge protection tools to monitor, respond to, and escalate alerts as needed.
Collaborate with the Global Security Operations Centre and L2 Insider Threat team for advanced investigations.
Ensure adherence to security policies for consistent, compliant alert handling.
Analyze alert patterns to prioritize threats and contribute to fine-tuning detection tools.
Play a role in enhancing our operational procedures and contribute to continuous improvement efforts.
Support special projects and initiatives focused on strengthening data protection policies and standards.