Scam disruption Analyst
Straive
Job Description
This high impact, high visibility position is part of Payment Systems Intelligence - a key component of Global Risk's Payment Ecosystem Risk and Control (PERC) initiative. PERC's team of technology experts are vital efforts to identify, investigate, disrupt and prevent attacks targeting the global payment ecosystem. This role will specifically aid in the all-source and technical analysis of cybercrime and fraud operations targeting the global payments ecosystem, with a specific focus on global scam campaigns. The Senior Analyst will be responsible for supporting efforts to identify, investigate, disrupt, and develop intelligence reporting on the most prolific and impactful scam activity targeting payments. The Senior Analyst will also be researching, drafting, publishing, and presenting client-facing and public intelligence reports. The Senior Analyst will support a key functional area with fraud and scam investigations, intelligence collection, client fraud and cybercrime discussions, and additional ad-hoc intelligence and cybercrime requests as needed. Key measures of success for this position include: reduced successful cyber fraud targeting financial institutions, identification and successful disruption of scam activity, the ability to support early identification of new fraud trends and tactics through intelligence collection and investigations, rapid response, triage and analysis of technical forensic investigation reports and ability to conduct analysis of material cybercrime, fraud and scam events. Primary Responsibilities: β Support efforts to disrupt scam activity, including uncovering scam infrastructure using closed and public sources, connecting infrastructure and common indicators across numerous investigations, and action investigation findings to disrupt scam activity at the source. β Support the development of robust and detailed processes for identification of scam activity, intake of reports from key partners, triage of identifications and reports to pursue most pertinent investigations, and follow the investigation through to disruption of the scam campaigns. β Manage vendor relationships and identify new and novel ways to utilize vendor tools for scam disruption. β Draft, publish, and present intelligence reporting for multiple audiences, including senior leadership, external clients, and for public consumption β Identify new fraud and cybercrime threats to the payments ecosystem and communicate them to relevant stakeholders β Triage and analysis of forensic investigation reports, identification of technical correlations between cybercrime attacks, and ability to develop digital infrastructure maps (domains, IPs, malware variants) of overlapping cybercrime operations. β Provide intelligence and technical analysis support to the Investigations team during official PCI forensic investigations. β Support risk personnel with investigations, intelligence collection, and extracting actionable information from intelligence sources. β Identify new fraud and cybercrime threats to the payments ecosystem and communicate them to relevant stakeholders. β Provide intelligence and technical analysis support to the Global Risk organization to further protect the payment ecosystem. β Conduct all-source analysis of cybercrime and fraud tools, methods, and attacks in order to communicate these threats to internal partners and external clients β Provide presentations to global audiences on cybercrime and fraud threats impacting the payments ecosystem β Other duties as assigned. Qualifications REQUIRED: β 3-7 yearsβ experience in payment card or information security industry, all-source cyber intelligence organizations, investigating payment card, cybercrime fraud with at least 3+ years of real-word experience. β At least 1 year of direct experience investigating and disrupting scam activity. β Excellent written, oral and presentation skills and an ability to synthesize information and make clear, concise recommendations on course of action β Moderate understanding of networks, risk management, network security, digital forensics, and security operations β Ability to identify emerging cybercrime and fraud techniques in a fast-paced, highly technical environment.
Understand network and system vulnerabilities and provide recommended counter measures or mitigating controls to reduce payments risk to an acceptable and manageable level. β Conduct in-depth fraud analysis in support of investigations and present findings to clients or internal partners β Leverage assistance from local, state and federal law enforcement agencies investigating incidents of fraud β Adaptable and able to work well in a fast paced, team-oriented environment β Prior experience with data analytics, visualization tools and concepts β Proficiency with drafting detailed, technical reports β Ability to respond after-hours, weekends and holidays to major global fraud events β Passion for fraud schemes and cybercrime investigations β Good interpersonal, facilitation, and demonstrated leadership skills β Understanding of payments process and cybercrime and fraud techniques β Able to operate at an advanced level of written and spoken communication; write and speak effectively with impact β Capable of delivering presentations and comfortably interacting with all levels of client management β Previous experience in developing and producing reports to executive management β Ability to prepare reports on meaningful trends and fraud stats β High level of self-motivation and initiative β Mastersβ degree in related field β Knowledge of transactions, systems processing transactions and overall transaction process. β Concepts, terms, processes, policy and implementation of information security β Intelligence databases and analytical tools or similar intelligence reporting systems β Analysis of cyber threat intelligence and fraud intelligence. β CISSP, CHFI, CEH, GIAC, Security certifications