Lead PNC’s Technical Insider Threat Program, including detection, investigation, remediation, and continuous improvement
Manage Employee Investigative Services activities related to insider fraud, misuse of systems, data exfiltration, and policy violations with a technical or cyber component
Establish and maintain insider threat operating models, governance, metrics, and reporting
Ensure alignment with NIST, Zero Trust, and regulatory guidance applicable to insider risk
Oversee technical monitoring capabilities
Partner with GSFC/SOC to operationalize insider threat detections and escalation workflows
Continuously evaluate detection efficacy and reduce false positives
Direct and oversee complex insider investigations, including potential fraud, sabotage, data theft, and policy violations
Ensure investigations are documented, defensible, and compliant with HR, Legal, Compliance, and regulatory standards
Coordinate evidence preservation, chain of custody, and forensic support
Support disciplinary actions, terminations, and referrals as appropriate
Lead investigations related to employee driven fraud involving systems misuse, payment manipulation, data access abuse, or collusion
Partner with Fraud Risk Management, Ethics Office, Compliance, and Corporate Investigations on insider fraud matters
Assess investigative findings for SAR reportability and support the preparation, review, and escalation of SARs involving insider activity, in coordination with Compliance and AML partners
Identify trends and systemic control gaps contributing to insider fraud risk
Act as a trusted partner to Human Resources & Employee Relations, Legal & Privacy, Compliance & Risk Management, Fraud Risk Management / AML, Audit and Regulatory Affairs
Support internal audits, regulatory exams, and management responses related to insider threat, employee investigations, and SAR governance
Lead and develop a team of insider threat analysts and investigators
Set priorities, manage workload, and ensure staff are trained on investigative, technical, legal, and SAR related requirements
Foster a culture of confidentiality, professionalism, and risk awareness
Produce executive level metrics, dashboards, and briefings for senior leadership
Maintain insider threat KPIs and trend analysis
Contribute to policy development and updates related to employee monitoring, investigations, and insider related SAR processes

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Forensics, Criminal Justice, or equivalent experience
7+ years of experience in: Cybersecurity, threat intelligence, insider threat, fraud investigations, digital forensics, or financial crime investigations
3+ years of people management or program leadership experience
Demonstrated experience leading internal investigations involving employees, including insider fraud
Experience supporting or participating in Suspicious Activity Report (SAR) evaluations, filings, or narratives related to insider activity or fraud
Strong understanding of insider threat methodologies and frameworks
User behavior analytics and security telemetry
Fraud schemes involving internal access

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecuritythreat intelligenceinsider threatfraud investigationsdigital forensicsfinancial crime investigationsuser behavior analyticssecurity telemetryNISTZero Trust

Soft Skills

leadershipinvestigative skillscommunicationconfidentialityprofessionalismrisk awarenessteam managementprioritizationworkload managementtraining

Certifications

Bachelor’s degree in CybersecurityBachelor’s degree in Information SystemsBachelor’s degree in ForensicsBachelor’s degree in Criminal Justice