Insider Threat Director

Colorado Springs, COfull timeOn Site

Apply on Employer Site

senior

$190k–$280k

H1B: no

Trueanomalyinc The Insider Threat Director at True Anomaly leads the development and management of a comprehensive insider threat program to protect national security missions and classified information. This role oversees policies, procedures, and technologies while collaborating with multiple departments and government agencies.

Responsibilities

Program Development & Leadership
Design, implement, and manage a mature insider threat program compliant with NISPOM, DCSA guidelines, ICD 503, Executive Order 13587, and other relevant federal requirements
Develop and maintain insider threat policies, procedures, and standard operating procedures (SOPs)
Establish program metrics and key performance indicators (KPIs) to measure effectiveness and demonstrate continuous improvement
Lead and mentor a team of insider threat analysts and investigators
Serve as the primary liaison with government oversight agencies, including DCSA, on insider threat matters
Threat Detection & Analysis
Oversee the integration and analysis of data from multiple sources including cybersecurity tools, physical security systems, HR systems, and operational logs
Develop behavioral indicators and technical signatures to identify potential insider threats
Implement continuous evaluation and monitoring programs in accordance with federal requirements
Coordinate threat hunting activities and proactive risk assessments
Ensure timely reporting and escalation of insider threat incidents to appropriate stakeholders

Qualification

Security ClearanceEducationExperienceProgram KnowledgeRegulatory ExpertiseTechnical AcumenAnalytical SkillsCommunicationJudgmentAn ideal candidate will also have

Required

Security Clearance: Active TS/SCI clearance or ability to obtain and maintain
Education: Bachelor's degree in Cybersecurity, Criminal Justice, Intelligence Studies, Information Security, or related field
Experience: Minimum 8 years of experience in insider threat, counterintelligence, cybersecurity, or security investigations, with at least 3 years in a leadership role
Program Knowledge: Demonstrated experience developing and managing insider threat programs in cleared defense or aerospace environments
Regulatory Expertise: Deep understanding of NISPOM, ICD 503, EO 13587, DCSA requirements, and insider threat program standards
Technical Acumen: Strong understanding of cybersecurity principles, network security, endpoint detection, and data analytics
Analytical Skills: Proven ability to analyze complex data sets, identify patterns, and assess risk
Communication: Excellent written and verbal communication skills with ability to brief senior executives and government officials
Judgment: Strong ethical foundation with demonstrated ability to balance security requirements with employee privacy and civil liberties

Preferred

An ideal candidate will also have:
Professional certifications such as CIPP (Certified Insider Threat Professional), CISSP, CFE, CDFE, or equivalent
Experience in the intelligence community, DoD, or law enforcement
Background in counterintelligence or counterespionage operations
Experience with space industry or critical infrastructure protection
Knowledge of behavioral psychology and threat assessment methodologies
Familiarity with advanced analytics platforms, SIEM tools, and machine learning applications for security
Experience with incident response and forensic investigations