Key Skills

Job Description

About us Starr is a global insurance and investment organisation providing property and casualty insurance solutions to business and industry. Starr has grown into one of the world’s fastest‑expanding insurance organisations, writing business in 128 countries across six continents. Our talented and experienced associates manage risk and ultimately support the profitable growth of organisations in a dynamic, competitive and ever-changing marketplace. Join us and become part of our talented and passionate workforce. Role Purpose The Compliance function plays a key role in helping Starr meet its regulatory, data protection and information governance obligations, while supporting the business in managing risk effectively. As data volumes, regulatory expectations and information security risks continue to evolve, Starr is committed to strengthening its capabilities to protect sensitive information and maintain customer, employee and business trust. The primary purpose of this role is to support the operation and continuous enhancement of Starr's Data Loss Prevention (DLP) and Insider Risk Management (IRM) programmes. Working closely with the Data Privacy Officer, the role will support the monitoring, investigation and management of data loss and insider risk events, helping to protect sensitive information, identify emerging risks, and strengthen information governance across the organisation. Key Responsibilities Support the day-to-day operation of Starr's Data Loss Prevention and Insider Risk programmes. Review, analyse, and investigate DLP and Insider Risk alerts, escalating matters where appropriate. Support incident management activities, including evidence gathering, documentation, and tracking of actions and outcomes. Assist in the maintenance and continuous improvement of monitoring controls, policies, and processes. Support awareness and education initiatives that promote responsible handling of sensitive information across the organisation. Collaborate with Legal, Information Security, HR, Compliance, and business stakeholders to support investigations and risk mitigation activities. Maintain accurate records and documentation to support governance, compliance, and audit requirements. The above duties and responsibilities are not an exhaustive list, and you may be required to undertake other reasonable duties compatible with your experience and competencies. This description may be varied from time to time to reflect changing business requirements. Qualifications, skills and experience Essential 1-2 years' experience in data protection, privacy, information security, cybersecurity, compliance, risk management, or a related discipline, with an understanding of data protection and information security principles. Good analytical and critical thinking skills, with the ability to assess information, identify trends and support investigations. Excellent judgement, discretion and personal integrity, with the ability to handle highly sensitive and confidential information appropriately. Strong attention to detail and a commitment to accuracy and quality. Excellent written and verbal communication skills in English, with the confidence to engage effectively with stakeholders across different business functions. Proficiency in Microsoft Office applications, including Excel, Word, PowerPoint and Outlook. Degree educated in Law, Information Security, Cybersecurity, Information Technology, Privacy, Compliance, Risk Management or a related field. Desirable Exposure to DLP, IRM, information governance or security monitoring processes. Familiarity with monitoring tools such as Microsoft Purview, Microsoft Defender, and SIEM platforms. Interest in developing expertise in data protection, insider risk management, information governance and information security. Professional certifications such as CIPP, CISSP, CISM, CISA, CERT Insider Threat Program Manager, or equivalent qualifications would be advantageous but are not required.

Core Responsibilities

Support the day-to-day operation and continuous improvement of the Data Loss Prevention and Insider Risk Management programmes by reviewing alerts, investigating events, and assisting with incident management. Maintain governance and audit documentation, promote responsible handling of sensitive information, and collaborate with Legal, Information Security, HR, Compliance, and business stakeholders on investigations and risk mitigation.

Requirements

Requires 1–2 years of relevant experience, a degree in a related field, and understanding of data protection and information security principles. Candidates should have strong analytical skills, sound judgment and discretion, attention to detail, effective English communication, and proficiency with Microsoft Office; experience with DLP, insider risk, monitoring tools, or relevant certifications is desirable.