Insider Risk Analyst

For more than 55 years, Family Health Centers of San Diego’s (FHCSD) mission has been to provide caring, affordable, high-quality health care and supportive services to everyone, with a special commitment to uninsured, low-income and medically underserved persons. FHCSD is one of the top 10 largest federally qualified health centers (FQHCs) in the country. We operate more than 90 sites across San Diego County, including 29 primary care clinics, 23 behavioral health facilities, 10 physical rehabilitation clinics, nine dental clinics, five vision clinics, four outpatient substance use treatment programs, three mobile medical units, two mobile counseling centers, two urgent care centers, and a pharmacy. Our staff provides care to over 227,000 patients each year, of whom 91% are low-income and 29% are uninsured. FHCSD provides care to all. Services include, but are not limited to adult care, chronic disease management, pediatrics, comprehensive women’s care including obstetrics, dental, vision, case management, physical rehabilitation, speech therapy for children, vaccinations, infectious diseases, behavioral health, substance use counseling and a host of specialty services including cardiology, podiatry, endocrinology, dermatology, among others.  FHCSD also offers supportive services to those who are unsheltered and in need of intensive case management.    The breadth of our clinic locations, services and programs has grown over the last five decades, making us the largest community clinic provider of health care to the uninsured in the county and one of the top 10 largest community clinic organizations in the nation. We are also the largest health care safety-net provider, largest school-based health care provider and the largest mental health provider in the San Diego region. Job Profile Summary The Insider Risk Analyst is responsible for supporting sensitive internal investigations involving employee activity, data protection, and policy compliance. This role operates within the IT department and works in close coordination with Human Resources, Legal, Information Security, and Network Operations to ensure investigations are conducted in a secure, consistent, and legally defensible manner. The Insider Risk Analyst serves as a trusted technical partner, assisting with the preservation, review, and analysis of electronically stored information (ESI), insider risk indicators, and policy violations. The role requires strong judgment, discretion, and the ability to communicate clearly with non‑technical stakeholders, including directors, General Counsel, and executive leadership. This position is an individual contributor role reporting to the Manager, IT Operations & Infrastructure and does not have supervisory responsibilities. Job Roles Support approved internal investigations by assisting with the identification, preservation, and collection of Electronically Stored Information (ESI). Coordinate technical aspects of eDiscovery and legal hold workflows in partnership with Human Resources and Legal. Assist with the review of insider risk, data protection, and behavior policy alerts to support investigative efforts. Establish timelines, contextual findings, and technical summaries for investigations without making employment or disciplinary determinations. Partner with Information Security, NetOps, and IT Operations teams to ensure appropriate logging, monitoring, and retention is in place to support investigations. Validate that logging and monitoring controls are operating as intended and support investigative and audit requirements. Prepare clear, factual documentation and summaries of technical findings for non‑technical audiences. Maintain detailed records of investigative support activities to ensure defensibility, traceability, and audit readiness. Contribute to the development and maintenance of standard operating procedures, workflows, and documentation related to insider risk and investigations. Handle sensitive employee and organizational information with a high degree of confidentiality, professionalism, and discretion. Perform other duties as assigned. Education/Certifications/Licenses/Registrations Bachelor’s degree in Information Technology, Computer Science, Information Systems, Criminal Justice, Legal Studies, or a related field required. Certified E‑Discovery Specialist (CEDS) – highly preferred. Certified Insider Threat Analyst (CITA) – highly preferred. Traveling between sites and other locations is occasionally required. Must have a valid California driver’s license, an automobile, and proof of minimum levels of car insurance as required under California law, although limits of $100,000 are recommended. An acceptable driving record is also required. California law requires all drivers to obtain a valid California driver’s license within ten days of establishing residency. Reasonable accommodation may be provided on a case-by-case basis. Mileage and other reimbursement governed by policy. Experience/Specialized Skills 3–5 years of experience supporting internal investigations, eDiscovery, compliance, security operations, or digital forensics in an enterprise or regulated environment required. 2+ years of experience working in coordination with Human Resources, Legal, and/or Employee Relations teams on sensitive matters highly preferred. Practical experience with eDiscovery workflows, including legal holds, data preservation, and evidence review coordination. Experience reviewing and triaging Data Loss Prevention (DLP) and insider risk policy violations. Experience working in regulated environments such as healthcare, financial services, government, or similarly regulated industries. Strong analytical and critical‑thinking skills with the ability to synthesize technical data into clear, factual findings. Demonstrated ability to communicate complex technical concepts and investigative findings to non‑technical stakeholders, inc