below marketmost similar roles pay hereabove market
This role pays more than
50%
of similar roles. Most pay
$134,850–$185,000
— the blue band above.
At the midpoint, this role pays about
$164k
versus about
$160k
for comparable roles.
Based on 240 similar postings.
Employer
About Mastercard
Mastercard is a global technology company in the payments industry, processing transactions between financial institutions and merchants using its extensive network of credit, debit, and prepaid card products. Industry: Payments Technology & Financial Services
Mastercard currently has
162 open roles
on FindRole.
Listed pay typically runs
$122,000–$207,000
across 152 roles with salary data.
JOB TITLE: Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)
The Security Event Management group is seeking a Lead Security Monitoring and Response Analyst (Insider Threat Program Lead) to serve as the functional authority for the Insider Threat capability. You will lead the direction, standards, and evolution of people, process, and technology capabilities to identify and respond to insider risk. Key responsibilities include establishing the operating model, defining roadmap priorities, and guiding Data Loss Prevention, User Activity Monitoring, and User Behavior Analytics. You will collaborate with stakeholders to balance security objectives with privacy, legal, and HR requirements. Required skills include experience with Microsoft Purview, Microsoft Defender, Microsoft Sentinel, Endpoint DLP, and SIEM platforms. You must possess expertise in digital forensics, investigative methodologies, and threat hunting to mitigate emerging tactics and procedures within the payments industry.
Set Insider Threat investigation standards and guide subject matter experts on complex, high-risk cases.
Build Insider Threat detection strategies, controls, and countermeasures aligned to emerging tactics and techniques.
Drive the maturity of DLP, UAM, and UBA capabilities in partnership with technology owners.
Maintain Insider Threat policies, operating standards, and accurate program documentation.
Serve as the primary liaison for Technology, Security, HR, Legal, Privacy, and Compliance partners.
Define capability roadmaps and partner with engineering teams to deliver tool and platform enhancements.
Design exercises to test and strengthen the organization's Insider Threat capabilities.
Lead the Insider Threat Working Group and escalate priorities to the Steering Committee.
What we're looking for
Extensive experience in security operations, incident response, insider risk, digital forensics, or related cybersecurity disciplines.
Demonstrated ability to conduct and oversee sensitive, confidential investigations involving employee activity while maintaining privacy and evidentiary integrity.
Experience developing, enhancing, or governing Insider Threat, DLP, UAM, UBA, or related security capabilities.
Experience with Microsoft security technologies including Microsoft Purview, Microsoft Defender / IRM, Microsoft Sentinel, and Endpoint DLP.
Experience with Security Information and Event Management (SIEM) platforms and security event analysis.
Working knowledge of Windows and macOS operating systems, including key architectural and investigative differences.
Familiarity with threat hunting methodologies, open-source intelligence (OSINT), and cyber investigation techniques.
Relevant industry certifications such as CISSP, GCIH, GCIA, Security+, or equivalent (preferred).
Data Loss Prevention (DLP)
User Activity Monitoring (UAM)
User Behavior Analytics (UBA)
Microsoft Purview
Microsoft Defender
Microsoft Sentinel
Endpoint DLP
SIEM
Incident Response
Digital Forensics
Threat Hunting
OSINT
Windows
macOS
GDPR
CISSP
GCIH
GCIA
Security+
Power BI
Dataverse
Power Apps
Power Automate
DAX
Data Modeling
Information Security
Risk Management
Cybersecurity
Data Analysis
Governance
Compliance
Reporting Architecture
Automation