Insider Risk Analyst

Insider Risk Analyst – D10

About us
Dyson is a global technology company. Using a desire to make things work better as a catalyst for invention, our team of engineers and scientists are passionate about developing technology that solves the problems others often ignore. But it is not enough to simply solve these problems. We need to solve them FIRST.
Dyson invests heavily in research and development and works with more than 40 universities worldwide to develop early-stage technologies. Dyson people are encouraged to think differently, challenge convention and be unafraid to make mistakes. We are creative, collaborative, practical, enthusiastic and resourceful.
To succeed, we need to protect our innovation and keep our secrets, secret. A strong security culture helps us ensure that our new technologies stay way ahead of our competitors and amaze our customers. Every employee has an important part to play in protecting our intellectual property and our commercially sensitive information.

About the role
The Insider Risks program exists to protect our commercially sensitive information. The program sits within our Group Security team, whose mission is to enable Dyson to do business in a safe and secure environment by identifying and managing risk. We protect our people and our reputation, and prevent loss of revenues and assets.
The Insider Risks team ensures that the policies and standards we use to protect our information are followed and proactively enforced internally and throughout our supply chain. We help our employees and third parties understand how and why our sensitive information remains confidential, and we provide training on our security culture. When employees, contractors or partners place our intellectual property or sensitive information at risk of unauthorised exposure, we investigate and take the appropriate action to enforce our policies.

• Other responsibilities include:
  Author polices/rules in the Data Loss Prevention (DLP) suite to meet the business data protection objectives, using best practice, knowledge and judgement in the context of existing and planned rules.
• Provide advice and guidance as to the art of the possible for Information Protection and provide options based on a broad knowledge of the current and planned Dyson data protection capabilities and provide guidance on the business impact of those options.
• Monitor alerts triggered as a result of technical rule violations, making judgements as to next steps.
• Continue to refine technical rules to ensure alerts are genuine and meaningful, reducing the volume of false positives
• Configure and produce reporting within the DLP tooling, providing business visibility of user behavior
• Identify opportunities for improvements, across process and tooling
• Follow standard validation and change control processes.
• Adhere to sensitive data handling controls and guidance
• Support the wider team of investigators and senior analysts who undertake highly sensitive and commercially significant investigations into breaches of our policies and standards, undertaking those investigations within the scope of the law and our company rules.

About you
As an Insider Risk Analyst, you excel in multi-cultural, diverse environments and uphold the highest ethical standards with strong self-discipline and confidentiality. Your exceptional communication and interpersonal skills enable you to interact effectively with individuals at all levels. Additionally, you thrive in high-paced settings, demonstrating adaptability and efficiency in managing insider risk.

 Essential
Understanding of Data Protection legislation and its applicability to employee monitoring.
Exceptional level of attention to detail, with the ability to present complex, well-evidenced findings in a concise and logical manner.
Ability to manage a complex workload, and comply with demanding timelines and reporting obligations.
Ability to follow procedures, maintain quality standards, understand regulatory requirements, and adhere to company policies and controls.

 Qualifications and Experience:
At least two years’ experience in an IT analyst role, ideally in systems administration.
Knowledge of Active Directory to understand how to apply rules to the right people.
Ability to assess threats, vulnerabilities, and risk as per the Dyson risk framework.
Knowledge of Data Privacy laws and procedures.
Competence in the use of Microsoft Office solutions and database management.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.