Manager- Insider Risk Rule Development
Listed on 2026-01-27
-
IT/Tech
Data Analyst, Data Security
Location: New York
Work Location
New York, New York, United States of America
Hours40
Pay Details$103,970 - $155,950 USD
TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.
As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Line Of BusinessAnalytics, Insights, & Artificial Intelligence
Job DescriptionThe Manager, Insider Risk Rules Development, is an individual contributor in the first line of defense responsible for the design, development, implementation, and optimization of insider risk detection rules addressing internal fraud against the firm and customers. The role translates insider threat typologies, risk scenarios, and business requirements into effective, data‑driven detection logic, while partnering closely with investigations, data, and technology teams to ensure high‑quality alert generation and operational usability.
Depth& Scope
- Acts as a subject matter expert integrating cross function understanding within their own field of specialty
- Works autonomously and accountable for acting as a lead within a specialized analytics function and may provide work direction to others
- Provides seasoned specialized knowledge, advice and/or guidance to various stakeholders and team members
- Expert at utilizing data sources across the organization with ability to integrate data across multiple platforms
- Works effectively across multiple business units with numerous stakeholders to deliver advanced analytics solutions
- Scope of role may have business segment and/or enterprise impact
- General focus on broad range of complex issues that may span from medium – long term issues (e.g. 6-12 months)
- Undergraduate degree or advanced technical degree preferred (e.g., math, physics, engineering, finance or computer science). Graduate's degree preferred with either progressive project work experience, or;
- 5+ year of relevant experience; higher degree education and research tenure can be counted.
- 5–8 years of experience in insider risk, fraud analytics, anti‑money laundering, or detection rule development within regulated environments.
- Hands‑on experience designing and implementing rules or scenarios using transactional, behavioral, access, and employee‑related data.
- Strong understanding of insider threat typologies, misuse‑of‑access patterns, and internal fraud schemes.
- Proficiency in data analysis for rule development, testing, and tuning; experience with feature exploration and threshold setting.
- Familiarity with rule testing practices, including back‑testing, UAT support, and post‑deployment tuning based on alert outcomes.
- Experience incorporating investigator feedback and QA results to improve alert quality and reduce false positives.
- Exposure to detection platforms, case management systems, and data pipelines supporting fraud or insider use cases.
- Ability to work independently while coordinating with senior ICs on oversight, testing, and validation activities.
- Works closely with business management on data modelling requests/activities to ensure alignment with overall strategies
- Leads the activities related to delivery of data deliverables - data package, data model, and data mappings
- Responsible for reading business and technical requirements to ensure data deliverables meet business needs
- Conducts walkthroughs of all data deliverables to aid approval/sign‑off process with internal stakeholders
- Adheres to enterprise frameworks or methodologies that relate to activities for our business area
- Ensures respective programs/policies/practices are well managed,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).