Cybersecurity - Insider Threat Analyst (L2)

About Us

WTW is a leading advisory, broking, and solutions company with a storied history dating back to 1828. From the Titanic in 1912 to supporting the Moon Buggy in 1971, we have a legacy of turning risk into growth opportunities. 

Our Lisbon Regional Delivery Hub is at the heart of this innovation, with a vibrant team of over 300 professionals dedicated to excellence every day.

The Opportunity

We are expanding our Cyber Security team and are looking for passionate professionals ready to make an impact. We have an exciting opportunity for an experienced L2 Insider Threat Analyst to join our growing team. This role is essential in investigating complex Insider Threat and Data Loss Prevention (DLP) cases that require advanced analysis. You’ll work closely with cross-functional teams to protect WTW from internal security risks, reporting directly to the Global Head of Insider Threat.

What You’ll Do

As an L2 Insider Threat Analyst, you’ll be at the heart of our cyber defense operations, taking on key responsibilities such as:

• Advanced Analysis: Investigate Insider Threat and DLP alerts across both on-premises and cloud environments, analyzing patterns to prioritize threats.
• Detection & Prevention: Leverage Microsoft Purview DLP and Insider Risk Management (IRM) tools to interpret data and prevent security incidents.
• Continuous Improvement: Identify trends and suggest improvements for detection policies and practices to enhance our overall security framework.
• Collaboration: Work closely with teams across Cyber Defense, Legal, Privacy, and HR during investigations to ensure compliance and resolution.
• Incident Reporting: Prepare detailed reports on investigations, incidents, and mitigation strategies, keeping stakeholders informed.
• Policy Refinement: Help fine-tune detection tools by providing feedback to the Global Head of Insider Threat and the Engineering team.

Secondary Responsibilities:

• Coach and mentor L1 Insider Threat Analysts.
• Contribute to projects enhancing data protection policies.
• Assist with additional tasks as directed by leadership.