Insider Risk Security Manager (E Discovery)

Insider Risk Security Manager (E Discovery)

Location: Kingston

Hybrid working: 3 days per week in the office

Fulltime

Unilever is one of the world’s leading suppliers of Food, Home, and Personal Care products with sales in over 190 countries and reaching 3.4 billion consumers a day. Unilever has more than 400 brands found in homes around the world, including Persil, Dove, Knorr, Domestos, Hellmann’s, Wall’s, Ben & Jerry’s, Marmite, Magnum, and Lynx. Faced with the challenge of climate change and the need for human development, we want to move towards a world where everyone can live well and within the natural limits of the planet. That’s why our purpose as Unilever is ‘to make sustainable living commonplace’.

At Unilever, we’re determined to achieve a culture where everyone can thrive, a culture where all individuals are treated fairly and respectfully, and where their uniqueness is celebrated. We’re taking a holistic approach that focuses on how we can use the scale and reach of our business to have the greatest impact in our own workplace and beyond. We’ve set clear goals to eliminate any bias and discrimination in our policies and practices, accelerate diverse representation in our leadership, and remove barriers for people with disabilities. At the same time, we’re setting out to spend more with diverse businesses and increasing representation of diverse groups in our advertising. Find out more about our commitment to equity, diversity, and inclusion on our website.

Unilever’s Cyber Technology and Operations team is Responsible for the detection and response to Cyber incidents and ensuring our security technologies keep pace with the ever-changing threat landscape, Tech and Ops are seen as traditional network defenders. Split into eight key functions, we provide 24/7 365 defense of Unilever’s network.

Role Purpose:
The Insider Risk team is primarily focused on the security of our people and data, as opposed to our technologies, internal security helps prevent data loss through controls and recognizing unusual behaviors that could indicate malicious activity or a compromised account. They also manage the E Discovery forensic service to support self-identified incidents and support other UL investigative departments. Insider Risk also supports the management of policies that apply to our data to ensure it is safe and usable across our business.

Role Summary:
A vacancy exists for a Forensic Investigations manager within Unilever’s Insider Risk Team. The successful candidate will be responsible for helping to keep Unilever and our systems, data, and customers secure.

Key areas delivered by the Insider Risk team include:
• Ensuring the deployment and running of security tooling, in conjunction with the Tech & Ops team.
• Playing an active role in the definition and iteration of the Unilever Cyber Security transformation.
• Continuously explore and implement cost effective measures to optimize security investment.
• Influencing a broad range of stakeholders in various teams across the business, including IT architects, developers and engineers, programme managers, and business data owners.
• Managing and utilizing cyber security tooling and capabilities, including detection and monitoring activities.
• Investigating and managing investigations into any suspicious activities on our systems and taking any necessary steps to remedy them in a timely manner
• Providing sensitive investigative services to other key UL functions
• Reducing any risk or impact caused by a cyber incident
• Advising the broader organization on security best practices where applicable

Skills:

• Excellent written and verbal communication skills and able to be understood by both technical and non-technical personnel.
• Proven ability to lead, develop, and motivate a team.
• The ability to lead through accountability with delegated responsibilities.
• Ability to manage conflicting priorities and multiple tasks.
• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Able to work in a collaborative environment with international team members.
• Outstanding critical reasoning and problem-solving skills
• Customer-orientated, whether responding to queries or delivering new services.
• Skills in Programme and Project Management.

Experience:

• Good experience in using Purview E Discovery.
• Experience of use case management technologies and fully documenting incident resolution.
• Solid understanding of sensitive investigations and experience of handling multiple stakeholders with different investigative output requirements.
• Deep base of experience in cyber forensic principles and practical application in investigative scenarios.
• Building or maturing a forensic readiness and response program.
• Selecting and deploying forensic and threat detection tools.
• Establishing metrics/KPIs for incident response performance.
• Aligning forensic practices with organizational risk management strategies.
• Working knowledge of legal processes for evidence handling and chain of custody.
• Familiarity with standards and regulations such as:

-NIST CSF / NIST 800-61

-ISA/IEC 62443

-ISO/IEC 27001

• Conducting end-to-end digital forensic investigations (disk, memory, network).
• Hands-on experience with forensic tools (e.g., EnCase, FTK, X-Ways, Volatility, Autopsy).
• Experience with SIEMs and EDR solutions (e.g., Splunk, Sentinel, CrowdStrike, Carbon Black).
• Familiarity with log analysis from Windows, Linux, firewalls, and ICS/SCADA systems.