Position Summary 
The Insider Risk Manager will help to establish and lead the Insider Risk team in Pune, India. This role is responsible for overseeing daily insider risk operations, coordinating investigations, and ensuring the team provides timely, consistent, and effective response support. The Insider Risk Manager will strengthen insider risk detection and response capabilities across the full incident lifecycle, including triage, investigation coordination, containment, remediation, and process improvement. The role requires strong technical expertise in incident response, SOC operations, and security tooling, as well as the leadership skills to hire, mentor, and develop a high-performing team in India. 

 

Primary Duties and Responsibilities 

• Team Leadership: Lead the Insider Risk team in Pune, including hiring, onboarding, training, mentoring, coaching, and performance management for analysts and responders. 

• Incident Operations: Oversee daily insider risk detection and response activities, ensuring incidents are triaged, investigated, escalated, and resolved in a timely and consistent manner. 

• Escalation Management: Serve as the escalation point for high-priority or complex insider risk incidents, coordinating response actions and communications with global stakeholders. 

• Process Development: Develop, maintain, and continuously improve insider risk response playbooks, runbooks, standard operating procedures, and response workflows. 

• Cross-Functional Partnership: Partner with HR, Legal, Privacy, CSIRT, IT, Compliance, and Corporate Security teams to align investigation processes, technology use, reporting standards, and stakeholder communications. 

• Cyber Defense Collaboration: Collaborate with threat intelligence, vulnerability management, digital forensics, and CSIRT teams to support a unified cyber defense strategy. 

• Reporting and Metrics: Provide executive-level reporting on incident trends, operational performance, key metrics, and emerging risks. 

• Continuous Improvement: Drive ongoing enhancements to insider risk detection rules, automation opportunities, response processes, and operational effectiveness. 

 

Education and Qualifications 

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline required; Master’s degree preferred. 

• Strong knowledge of incident response methodology, SOC operations, and security frameworks (e.g., NIST, MITRE ATT&CK). 

• Familiarity with global privacy and compliance requirements relevant to incident handling. 

 

Preferred Certifications 

• GIAC Certified Incident Handler (GCIH) 

• GIAC Certified Intrusion Analyst (GCIA) 

• GIAC Certified Forensic Analyst (GCFA) 

• Certified Ethical Hacker (CEH) 

• Certified Information Systems Security Professional (CISSP)

.

Work Experience 

• 8+ years of relevant experience in cybersecurity, with at least 6 years focused on Insider risk reponse, data loss prevention triage and investigation, SOC operations or incident response. 

• Minimum of 4 years in a people management role, leading incident response or SOC analyst teams. 

• Hands-on experience with SIEM, EDR, DLP, SOAR, and forensic tools. 

• Proven experience responding to advanced threats, large scale data exfiltration campaigns, data loss prevention detection engineering and tuning, and insider incidents. 

• Demonstrated success in building or scaling security operations and incident response teams in a global enterprise environment. 

• Strong communication skills, with the ability to brief technical and non-technical stakeholders during incidents. 

 

What Cencora offers

​Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.

Full time

Affiliated Companies

Affiliated Companies: AmerisourceBergen Services Corporation

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [email protected]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned