Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.
Brown & Brown is seeking an Insider Risk Lead to join our growing team!Â
The Insider Risk Lead is responsible for developing, maturing, and overseeing Brown & Brownâs enterprise Insider Risk Management Program. This role will lead strategy, detection, investigations, and cross enterprise collaboration related to insider threatsâmalicious, accidental, or process driven. The Insider Risk Lad partners directly with cybersecurity, legal, TR, compliance, and business leadership to identify behavioral and data driven indicators of risk and guide sensitive risk response actions. The position requires high judgment, confidentiality, and excellent analytical and communication abilities.
How You Will Contribute:Â
Program Strategy & Development
Lead the design, governance, and maturity roadmap of the Insider Risk Program.
Develop policies, standards, and procedures aligned to enterprise cybersecurity objectives and regulatory expectations.
Establish operational models for monitoring, escalation, and executive reporting.
Threat Detection & Investigation
Oversee behavioral and technical monitoring tools (e.g., UBA, DLP, and privileged activity analytics).
Conduct and/or coordinate insider risk investigations, ensuring accuracy, discretion, and appropriate documentation.
Partner with Cybersecurity Operations to triage and interpret insider related alerts.
Enterprise Collaboration
Serve as the primary liaison to Legal, HR, Compliance, Technology, and business units for insider risk processes.
Facilitate communication and training to promote a culture of awareness and shared accountability.
Work within Brown & Brownâs decentralized structure to ensure alignment, transparency, and consistent practices.
Risk Reporting & Governance
Develop and deliver dashboards, reports, and insights for cybersecurity leadership and executive stakeholders.
Integrate insider risk into formal risk assessments and enterprise governance processes.
Ensure adherence to compliance standards, audit requirements, and enterprise documentation practices.
Other duties as assigned.
Skills & Experience to be Successful:
Experience in decentralized or federated enterprise environments (preferred)
Relevant certifications (e.g., CISSP, CISM, CEH, GIAC certified tracks) (preferred)
Experience with UBA, SIEM, DLP, endpoint detection, or cloud analytics platforms (preferred)
Experience working with HR, legal, or compliance leadership on risk matters (preferred)
Bachelor's degree in cybersecurity, information technology, risk management, or related field (or equivalent experience).
7+ years of experience in cybersecurity, insider threat, digital forensics, SOC operations, or similar roles.
Proven experience developing or managing insider risk or behavioral analytics programs.
Strong understanding of data protection, access management, monitoring tools, and investigative methodologies.
Superior communication and judgment, especially in sensitive or confidential situations.
Teammate Benefits & Total Well-Being
We go beyond standard benefits, focusing on the total well-being of our teammates, including:
Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.
The Power To Be YourselfÂ
As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, âThe Power to Be Yourselfâ.Â
bbinsurance