Sr. Manager, Insider Risk & Digital Forensics

Description This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting) Summary: The Senior Manager of Insider Risk and Digital Forensics is responsible for the strategic leadership, maturity, and day-to-day execution of the enterprise Insider Threat Program. This role leads the development of capabilities designed to identify, detect, investigate, and mitigate insider risk while protecting the organization's people, data, intellectual property, and critical assets. A successful candidate will partner across Cybersecurity, Human Resources, Legal, Privacy, Risk Management, Compliance, and Technology teams to establish a comprehensive, intelligence-driven insider risk program that leverages behavioral analytics, AI-driven detection capabilities, threat intelligence, and advanced monitoring technologies. This leader will oversee investigations, drive program innovation, and provide strategic guidance to executive leadership regarding emerging insider threats and associated business risks.

Leadership & Strategy Lead the strategic direction, maturity, and execution of the enterprise Insider Threat Program. Develop and maintain multi-year insider risk roadmaps, operating models, governance structures, and performance metrics. Identify opportunities to enhance insider risk capabilities through automation, AI, machine learning, and advanced analytics. Establish program objectives aligned with enterprise cybersecurity, risk management, legal, privacy, and regulatory requirements. Serve as the primary advisor to senior leadership on insider risk matters, emerging threats, and program effectiveness. Insider Risk Operations & Investigations Lead a team responsible for the triage, investigation, remediation, and closure of insider risk and digital forensics investigations. Oversee complex investigations involving: Data exfiltration Intellectual property theft Unauthorized access Fraud Policy violations Misuse of privileged access Ensure investigations are conducted with forensic rigor, appropriate evidence handling, and chain-of-custody standards. Coordinate response activities and remediation efforts with HR, Employee Relations, Legal, Ethics, Privacy, Security, and Technology teams. Detection Engineering & Analytics Design and enhance insider risk detection capabilities using: Security Information and Event Management (SIEM) User and Entity Behavior Analytics (UEBA) Data Loss Prevention (DLP) Threat Intelligence Platforms AI and advanced analytics solutions Develop behavioral analytics and risk scoring models to identify high-risk users and activities. Create and optimize detection use cases, monitoring processes, investigation workflows, and escalation procedures. Drive continuous improvement of detection accuracy and investigation efficiency. AI & Emerging Threat Management Support the development of AI-enabled insider risk monitoring and detection strategies. Assess risks associated with generative AI, unauthorized AI usage, and emerging technology threats. Leverage advanced analytics to identify abnormal behavioral patterns and emerging insider threat indicators. Evaluate new technologies to enhance insider risk visibility, automation, and response capabilities. Governance, Risk & Compliance Ensure insider risk controls align with enterprise governance and risk management frameworks. Incorporate industry best practices and frameworks, including: CERT Insider Threat Framework National Insider Threat Task Force (NITTF) Guidelines MITRE ATT&CK Framework Support regulatory examinations, audits, assessments, and compliance activities. Develop and maintain insider threat policies, standards, procedures, and playbooks. Cross-Functional Collaboration Build strong partnerships with Human Resources, Legal, Privacy, Compliance, Enterprise Risk, Physical Security, and Technology leadership. Lead workshops, interviews, and process