Insider Risk Security Manager (E Discovery)

Please Note: The deadline for applying is 23.59 the day before the job posting end date.

Job Title:  Insider Risk Security Manager (E Discovery)

Business Function: Cyber Security

Location: Kingston

Reports to:Director Insider Risk

Unilever is one of the world’s leading suppliers of Food, Home, and Personal Care products with sales in over 190 countries and reaching 3.4 billion consumers a day. Unilever has more than 400 brands found in homes around the world, including Persil, Dove, Knorr, Domestos, Hellmann’s, Wall’s, Ben & Jerry’s, Marmite, Magnum, and Lynx. Faced with the challenge of climate change and the need for human development, we want to move towards a world where everyone can live well and within the natural limits of the planet. That’s why our purpose as Unilever is ‘to make sustainable living commonplace’.

At Unilever, we’re determined to achieve a culture where everyone can thrive, a culture where all individuals are treated fairly and respectfully, and where their uniqueness is celebrated. We’re taking a holistic approach that focuses on how we can use the scale and reach of our business to have the greatest impact in our own workplace and beyond. We’ve set clear goals to eliminate any bias and discrimination in our policies and practices, accelerate diverse representation in our leadership, and remove barriers for people with disabilities. At the same time, we’re setting out to spend more with diverse businesses and increasing representation of diverse groups in our advertising. Find out more about our commitment to equity, diversity, and inclusion on our website.

Unilever’s Cyber Security team is a global, product-led function aligned to the NIST Cyber Security Framework. We deliver capabilities across governance, protection, detection, response, and recovery to safeguard our people, operations, and digital assets. Operating alongside our Technology and Data teams, Cyber Security enables secure innovation and resilience across our global business. Our structure is built around product families and risk-based priorities, with teams embedded across regions and business units.

JOB PURPOSE

The Insider Risk team is primarily focused on the security of our people​and data, as opposed to our technologies, internal security helps prevent data loss through controls and recognizing unusual behaviors that could indicate malicious activity or a compromised account. They also manage the E Discovery forensic service to support self-identified incidents and support other UL investigative departments. Insider Risk also supports the management of policies that apply to our data to ensure it is safe and usable across our business.

A vacancy exists for a Forensic Investigations manager within Unilever’s Insider Risk Team. The successful candidate will be responsible for helping to keep Unilever and our systems, data, and customers secure.

Key areas delivered by the Insider Risk team include:

• Ensuring the deployment and running of security tooling, in conjunction with the Tech & Ops team.
• Playing an active role in the definition and iteration of the Unilever Cyber Security transformation.
• Continuously explore and implement cost effective measures to optimize security investment.
• Influencing a broad range of stakeholders in various teams across the business, including IT architects, developers and engineers, programme managers, and business data owners.
• Managing and utilizing cyber security tooling and capabilities, including detection and monitoring activities.
• Investigating and managing investigations into any suspicious activities on our systems and taking any necessary steps to remedy them in a timely manner
• Providing sensitive investigative services to other key UL functions
• Reducing any risk or impact caused by a cyber incident
• Advising the broader organization on security best practices where applicable

RESPONSIBILITIES

• Supervise forensic analysis of devices and systems
• Ensure proper evidence collection and handling in accordance with legal and regulatory requirements.
• Analyze logs, malware, and traffic data to determine attack vectors and impacts.
• Maintain forensic readiness in environments with high availability and low tolerance for downtime.
• Ensure forensic activities comply with sector-specific regulations (e.g., NIST CSF, NERC CIP, ISA/IEC 62443).
• Support audits, insurance claims, and legal proceedings with documented forensic evidence.
• Maintain readiness for compliance reviews related to critical infrastructure.
• Continuously explore and implement cost-effective measures to optimize security investment where relevant to insider security.
• Prioritize and manage multiple workloads and support junior team members in achieving required outcomes.
• Own and update playbooks for relevant security best practices for the team.

ALL ABOUT YOU

Skills:

• Excellent written and verbal communication skills and able to be understood by both technical and non-technical personnel.
• Proven ability to lead, develop, and motivate a team.
• The ability to lead through accountability with delegated responsibilities.
• Ability to manage conflicting priorities and multiple tasks.
• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Able to work in a collaborative environment with international team members.
• Outstanding critical reasoning and problem-solving skills
• Customer-orientated, whether responding to queries or delivering new services.
• Skills in Programme and Project Management.

Experience:

• Good experience in using Purview E Discovery.
• Experience of use case management technologies and fully documenting incident resolution.
• Solid understanding of sensitive investigations and experience of handling multiple stakeholders with different investigative output requirements.
• Deep base of experience in cyber forensic principles and practical application in investigative scenarios.
• Building or maturing a forensic readiness and response program.
• Selecting and deploying forensic and threat detection tools.
• Establishing metrics/KPIs for incident response performance.
• Aligning forensic practices with organizational risk management strategies.
• Working knowledge of legal processes for evidence handling and chain of custody.
• Familiarity with standards and regulations such as:

-NIST CSF / NIST 800-61

-ISA/IEC 62443

-ISO/IEC 27001

• Conducting end-to-end digital forensic investigations (disk, memory, network).
• Hands-on experience with forensic tools (e.g., EnCase, FTK, X-Ways, Volatility, Autopsy).
• Experience with SIEMs and EDR solutions (e.g., Splunk, Sentinel, CrowdStrike, Carbon Black).
• Familiarity with log analysis from Windows, Linux, firewalls, and ICS/SCADA systems.

Behaviours

Candidates would be required to demonstrate the Unilever Standards of Leadership & live the Values through showing the following behaviors:

• Agility – Flexes leadership style and plans to meet changing situations with urgency. Learns from the past, envisions the future, has a healthy dissatisfaction with the status quo.
• Personal Mastery – Actively builds wellbeing and resilience in themselves and their team. Has emotional intelligence to take feedback, manage mood and motivations, and build empathy for others. Sets high standards for themselves and always brings their best self.
• Passion for High Performance – Inspires the energy needed to win, generating intensity and focus to motivate people to deliver results at speed.

NOTES

About Unilever

Unilever is one of the world’s leading suppliers of Food, Home and Personal Care products with sales in over 190 countries and reaching 2 billion consumers a day. Unilever has more than 400 brands found in homes around the world, including Dove, Tresemme, Lynx, Lifebuoy, Shea Moisture, Persil, Domestos, Ben & Jerry’s, Magnum, Marmite, The Vegetarian Butcher, Graze and Pot Noodle.

Faced with the challenge of climate change and the need for human development, we want to move towards a world where everyone can live well and within the natural limits of the planet. That’s why our purpose is ‘to make sustainable living commonplace’  

What We Offer

Not only do we offer a competitive salary and pension scheme, we also offer an annual bonus, subsidised gym membership, a discounted staff shop and shares. You’ll have the opportunity to work directly with our renowned and exciting brands in a flexible and hybrid working environment.

Whilst the role is advertised on a full-time basis, we would be happy to discuss possible flexible working options and what this may look like for you. We are a key advocate of wellbeing and offer a variety of support for our people including hubs, programmes and development opportunities. We strive to achieve a family-friendly and inclusive workplace and to, above all, create possibilities for all. 

Diversity at Unilever is about inclusion, embracing differences, creating possibilities and growing together for better business performance. We embrace diversity in our workforce. This means giving full and fair consideration to all applicants and continuing development of all employees regardless of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage and civil partnership, and pregnancy and maternity. We are also more than happy to provide reasonable adjustments during our application and interview process to enable you to be present your best self. To find out more, including about our Employee Resource Groups, please click here Equity, Diversity & Inclusion at Unilever | Unilever.

Recruitment Fraud

Cyber criminals advertise fake job adverts with prestigious employers as a way of stealing information or even defrauding individuals out of money. In the most sophisticated cases, they will set up fake websites, which have a similar address to companies like Unilever. They even conduct fake telephone interviews and then offer candidates a role with the proviso they pay a fee for background checks or to cover work visa costs.  These types of attacks are becoming more common as more people are looking for employment in the economic climate. 

How is Unilever tackling this?

Many of Unilever’s recruitment sites publish a warning to candidates about recruitment fraud. The Cyber Security team also proactively scan for signs of people setting up fake Unilever sites and act to close them down. 

What can I do?

If you become aware of potential recruitment fraud, spot fake Unilever recruitment adverts or fake LinkedIn profiles, report them via Una Live Chat. 

Unilever does not accept responsibility or liability for any candidates who are financially impacted by recruitment fraud. Your vigilance is key!