Insider Risk Management

Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating solutions that matter for people and our planet for generations to come. From the beginning, we've led in inventing new technologies and entirely new industries. Today, we continue to lead because we have a world-class, diverse workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow Carrier on social media at @Carrier.

About This Role

The Insider Risk Management supports the organization’s cybersecurity operations by monitoring designated networks, systems, and user activities for potential insider threats. This role focuses on identifying, analyzing, and escalating suspicious behaviors or policy violations to protect sensitive data and maintain compliance.

Key Responsibilities:

• Perform and oversee continuous monitoring of user activity across networks, systems, and applications to detect potential insider risks.
• Assist in investigating alerts and anomalies related to data loss prevention (DLP), access control, and privileged account usage.
• Support the development and enforcement of insider risk policies, procedures, and awareness programs.
• Collaborate with cybersecurity, HR, and legal teams to ensure proper handling of insider risk cases.
• Document findings, prepare reports, and maintain accurate case records for audits and compliance reviews.
• Perform periodic reviews of access rights and assist with identity and access management (IAM) processes.
• Maintain daily awareness of emerging insider threat tactics and develop improvements to monitoring tools and workflows.

Required Qualifications:

• Bachelors Degree
• 4+ years of project/program management, cybersecurity operations, fraud investigations, risk management.

Preferred Qualifications:

• Demonstrable experience in identifying and mitigating insider threat indicators in an enterprise-level environment ; creating and outlining data protection principles, overseeing data loss prevention (DLP) programs, and working with insider risk and data protection security controls.
• Demonstrated proficiency in utilizing SIEM tools, DLP solutions, and IAM processes.
• Demonstrable experience in intelligence and investigations analysis.

• Insider Threat Program or related certification (e.g., C|CISO, CISM, CMU Insider Threat training)
• Knowledge of behavioral analytics and user activity monitoring tools (UEBA, Microsoft).
• Knowledge and proficiency with Digital Forensics tools (Encase, FTK, Magnet)

#LI-Hybrid

RSRCAR

Carrier is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Carrier provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Job Applicant's Privacy Notice:

Click on this link to read the Job Applicant's Privacy Notice