Overview /Objective

The Director of Insider Threat Programs and Investigations, will be responsible for collecting and assessing potential threats from within the organization, whether they're from employees, business partners, or third-party vendors. In addition, the Director will develop capabilities to prevent, detect and deter evolving insider threats and improve their mitigation and incident management practices. This role will include a focus on the safety and integrity of the sport.

Responsibilities

Analyze architect technologies to evaluate employee behavior and identify potential insider threats.
Lead and collaborate on the development and implementation of an Insider Threat Program (InTP)
Develop policies and processes that will enable and assist in timely monitoring of employees, systems and corporate data.
Coordinate with key stakeholders and management on aligning risks and assist with investigations across the enterprise.
Drives the acceptance and adoption of Insider Threat Program by closely working with legal, HR, compliance, and other regulatory teams within the firm.
Develop and implement techniques to apply Insider Threat principles and analysis to identify violations of League policies.
Continuously evaluate changes in actors, tactics, techniques, and targets and make necessary updates to detection tools and technologies in accordance to changing insider threat landscape.
Work with the Information Security team to assess and implement new technologies in Cybersecurity analytics and review existing technology for capabilities and limitations.
Ability to work in a multi-disciplinary operations center where interaction with other teams is mandatory.
Perform and coordinate due diligence and background investigations on employees and partner companies.
Assess and develop plans to identify malicious insiders operating outside of League policies.
Collaborate with other Leagues, local/state/federal agencies, sports wagering operators, and the corporate world on effective measures to detect, deter, and mitigate insider threats.

Required Qualifications

Bachelor’s Degree in computer science or related discipline.
3-5 years of experience in an Insider Threat role.
Experience in conducting and completing investigations involving cyber and technology.
Experience working with Information Security teams and skills/familiarity with computer platforms.
Solid understanding of cybersecurity concepts like cyber kills chain, APT, Threat Intelligence etc.
Experience in assessment of assets, threats and vulnerabilities.
Proven ability to innovate, develop, implement, and effectively document complex technical systems and approaches.
Proven ability to integrate multiple technologies, standards and data sources into a consolidated solution.
Proven Project Management experience with excellent communication and collaboration skills.

Preferred Qualifications

CERT Insider Threat Program Manager Certificate (Preferred)
Experience with SIEM technologies like Splunk, ArcSight & Qradar.
Experience with developing solutions for Security Operations Center, fusion center and supporting SOC operations.
Hands on experience in analyzing the data structure/data model pertaining to security event sources like proxy, firewalls, network devices, IDS/IPS etc.
An understanding and familiarity with sports wagering and associated systems.

Physical Demands

Travel

20% travel to alternate sites

Salary / Pay Range

This job posting contains a pay range, which represents the range of salaries or hourly rates that the NFL believes, in good faith, at the time of this posting that it might be willing to pay for the posted job in the location(s) specified. The NFL expects to hire for this position near the middle of the range. Only in truly rare and exceptional circumstances, where an external candidate has experience, credentials or expertise that far exceed those required or expected for the position, would the NFL consider paying a salary or rate near the higher end of the range.

Terms / Expected Hours of Work

NFL employees are required to work 40 hours per week. Indicate whether or not the role will require overtime (time worked in excess of 40 hours) and/or weekends. Note* If your position will work under 30 hours per week, they should be Part Time. FLSA** If an employee will be paid hourly, they will be non-exempt, and if they are paid a salary, they are exempt.
The NFL maintains a Flexible Workplace Policy that provides members of our workforce with opportunities to periodically work from a location of their choice, while maintaining a priority on in-person work at an NFL office, which enables us to more effectively collaborate, connect and build a workplace culture that will drive our continued success.
The NFL is committed to building a diverse, equitable and inclusive work environment that reflects our incredibly diverse fan base. We provide an environment of mutual respect where equal employment opportunities are available to all employees and applicants without regard to status as protected by applicable federal, state, or local law.

Director – Insider Threat