Insider Risk Analyst

Overview Toyota Financial Services (TFS), a finance and insurance brand for Toyota and Lexus in North America, is seeking a Risk Management Analyst. The analyst will proactively identify, assess, mitigate, and deter risks arising from employee and contractor activity and lead insider risk investigations under the Information Security mandate. Responsibilities Continuously monitor and assess security alerts from insider threat detection systems across on-prem, cloud, and endpoint environments. Analyze system logs, network traffic, authentication records, and application data to identify potential threats. Design and implement detection rules, scripts, and algorithms to identify anomalous user behaviors indicative of insider threats. Apply correlation techniques to link suspicious activities across multiple data sources and build comprehensive threat narratives. Serve as senior analyst during insider threat investigations, coordinating containment and remediation with Legal, HR, and cyber defense teams. Assist in developing and maintaining standard operating procedures (SOPs) and playbooks that streamline alert triage, investigation, and escalation. Continuously refine workflows to improve efficiency and consistency. Qualifications 3+ years of experience in cyber security, including anomaly detection, SOC detection and engineering, DLP, threat hunting, SIEM, and incident response. Subject‑matter expertise in one or more IRM technologies (e.g., EUBA, EDR, Email DLP, Cloud DLP). Strong understanding of the insider threat landscape and incident response methodologies, chain of custody requirements, and data protection regulations. Excellent communication skills with the ability to influence stakeholders at all levels. • (optional) Bachelor’s degree in a relevant field or equivalent work experience. Experience in a regulated industry (finance, healthcare, government). Proficiency in programming and query languages (PowerShell, Python, SQL, Yara, FQL, KQL, EQL, SPL). Familiarity with DLP and UBA. Proficiency in AWS and Azure cloud environments with understanding of data flows and access management. Experience in threat detection, incident response, and root‑cause analysis in cloud environments. Familiarity with eDiscovery and litigation processes. Benefits Work environment built on teamwork, flexibility, and respect. Professional growth and development programs, including tuition reimbursement. Team Member Vehicle Purchase Discount and Toyota Team Member Lease Vehicle Program (if applicable). Comprehensive health care and wellness plans for you and your family. Toyota 401(k) Savings Plan with company match and annual contribution. Paid holidays and paid time off. Referral services for prenatal services, adoption, childcare, schools, and more. Tax‑advantaged accounts: HSA, HCA FSA, and Dependent Care FSA. Relocation assistance (if applicable). Work Authorization Toyota does not offer sponsorship of job applicants for employment‑based visas or other work authorization for this position at this time. Eligibility and EEO Statement Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. #J-18808-Ljbffr