- Maintain confidentiality of sensitive information in a high-trust role.
- Research, identify, and analyze potentially fraudulent activity across systems, transactions, accounts, and business processes.
- Review alerts, logs, reports, and other data sources to detect suspicious behavior, anomalies, or fraud indicators.
- Experience working with SIEM products for alert consolidation and ability to make recommendations on improving reporting and alerting.
- Experience reviewing alerts and reporting and making recommendations related to security in O365, cloud environment, and AI.
- Investigate suspected fraud events and document findings, supporting evidence, root cause, and recommended next steps.
- Assist with fraud trend analysis by identifying recurring patterns, emerging risks, and indicators of compromise or abuse.
- Support monitoring of internal and external activity that may present fraud risk, including account misuse, social engineering attempts, suspicious access, and unusual transaction behavior.
- Conduct research into known and emerging fraud schemes, including account takeover, impersonation, payment fraud, benefits fraud, and other forms of abuse relevant to the organization.
- Develop and maintain fraud case documentation, including timelines, findings, evidence, and recommended corrective actions.
- Partner with internal teams such as IT, Security, Compliance, HR, Finance, and Operations to evaluate suspicious activity and support coordinated fraud response efforts.
- Support the refinement of fraud detection processes, alerts, and review criteria to improve identification of suspicious activity and reduce false positives.
- Track and report on fraud attempts, confirmed incidents, loss trends, investigation outcomes, and control gaps to support leadership decision-making.
- Knowledge of incident response processes and escalation.
- Recommend improvements to policies, procedures, and internal controls based on fraud investigations, observed trends, and root cause analysis.
- Review reported phishing emails and support related fraud or social engineering investigations.
- Assist in the development and execution of monthly phishing campaigns and user awareness activities.
- Audit user access privileges and support access reviews to identify inappropriate, excessive, or suspicious access.
- Review network, system, and security logs for indicators of fraud, misuse, or policy violations.
- Prepare clear, accurate, and timely reports on suspicious activity, fraud investigations, and risk trends for leadership review.
- Support the maintenance of case records, investigative documentation, and evidence needed for audit, compliance, or internal review purposes.
- Partner with business units to research fraud concerns, validate suspicious activity, and recommend mitigation steps.
- Support vendor, client, or third-party security and fraud-related review activities as assigned.
- Stay current on fraud schemes, threat trends, investigative techniques, and security best practices.
|