Jobs › Wintrust

This position has closed. Wintrust removed this listing from their careers page on Sep 25, 2026. The interview prep below is still useful, and there are similar open roles at the bottom of this page.

Senior Insider Risk Investigator

Wintrust · Rosemont, IL · $150,000–$165,000 a year · Full time

Posted Aug 4, 2026 · We last checked this listing on Sep 22, 2026

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

You would mentor other investigators and share lessons learned. What do newer investigators get wrong most often?

What they are checking: Depth visible through what they teach.

This is the lead investigator seat for the Insider Risk Program in Rosemont, asking seven or more years in security or investigations and five or more running investigations. What would you want to know about the program's maturity?

What they are checking: That they ask what tooling and mandate exist before taking a lead role.

What would you do

This role leads investigations into data loss and insider threats across email, endpoint, cloud and collaboration tools. Walk me through the first day of an investigation triggered by a data loss prevention alert.

What they are checking: Investigative method from intake, the core of the job.

You coordinate with Legal, Human Resources, Compliance, Privacy and Cybersecurity. How do you keep an investigation moving when five functions have a say?

What they are checking: Running a case across functions that each have a veto.

Insider investigations involve real employees who may be innocent. How do you protect someone's privacy while still investigating properly?

What they are checking: The ethical weight of this work, which the posting does not spell out.

An investigation points at a senior employee. Does anything change?

What they are checking: Whether they apply the same standard regardless of rank.

About the work

You would analyze technical, behavioral and business context to assess risk and intent. How do you tell careless from deliberate?

What they are checking: The judgment that decides whether a person loses their job.

You would conduct proactive threat hunting for high-risk behaviors. What would you hunt for that an alert would not catch?

What they are checking: Hypothesis-driven hunting rather than reacting to tooling.

The posting names artificial intelligence enabled technologies as a place data can leave. What new exposure do those tools create?

What they are checking: Current awareness of a risk area the posting flags explicitly.

You would collect evidence that may support a termination or a referral. What makes evidence hold up?

What they are checking: Defensible collection and documentation.

Practice this interview out loud.

Offer builds a real interview for this exact role at Wintrust from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Wintrust.

Wintrust provides community and commercial banking, specialty finance and wealth management services through its 16 bank charters and nine non-bank businesses. Wintrust delivers the sophisticated solutions of a large bank while staying true to the relationship-focused, personalized service of our community banking roots. We serve clients in all 50 states with more than 200 branch banking locations in Illinois, southwestern Florida, northwestern Indiana, west Michigan and southern Wisconsin and commercial banking offices in Chicago, Denver, Milwaukee, Grand Rapids, Mich., and in key branch banking locations throughout Illinois. Our people are the heart of our business and we are proud to rank consistently as a top place to work. Wintrust is a $66 billion financial institution based in Rosemont, Illinois, and listed on the NASDAQ Global Select Market under the symbol “WTFC.” Why join us? • An award-winning culture! We are rated a Top Workplace by the Chicago Tribune (past 12 years) and Employee Recommended award by the Globe & Mail (past 6 years) • Competitive pay and discretionary or incentive bonus eligible • Comprehensive benefit package including medical, dental, vision, life, a 401k plan with a generous company match and tuition reimbursement to name a few • Promote from within culture Why join this team? • This position has the opportunity to interface with and have a positive impact on multiple areas of Wintrust's business • We hold ourselves accountable to high standards, share wins, operate ethically, and have fun Position Overview The Senior Insider Risk Investigator serves as the lead investigator for the Insider Risk Program, responsible for leading complex investigations involving data loss, insider threats, policy violations, misuse of company assets, and emerging AI-related risks. This role partners closely with Legal, Human Resources, Privacy, Cybersecurity, and business stakeholders to assess risk, drive appropriate response actions, mentor fellow investigators, and support the continuous maturation of the Insider Risk Program. What You’ll Do • Lead complex insider risk and data loss investigations across email, endpoint, cloud, collaboration, and AI-enabled technologies • Analyze technical, behavioral, and business context to assess risk, intent, and potential impact • Coordinate investigation activities and remediation actions with Legal, Human Resources, Compliance, Privacy, and Cybersecurity teams • Conduct proactive threat hunting activities to identify high-risk behaviors, emerging insider threats, and unauthorized data exposure • Research emerging insider threat, data protection, and AI-related risks to enhance investigative effectiveness and partner with Insider Risk Engineering team to identify monitoring gaps, provide investigative feedback, and improve alert fidelity • Identify opportunities to improve visibility into human-centric risks and strengthen investigative capabilities • Serve as the lead investigator for the Insider Risk Program, providing guidance and mentorship to other investigators sharing investigative knowledge, lessons learned, and emerging threat insights with the team Qualifications • 7+ years of experience in cybersecurity, insider risk, investigations, threat intelligence, digital forensics, incident response, security operations, corporate investigations, or related disciplines • 5+ years of experience conducting investigations involving data loss, insider threats, employee misconduct, fraud, abuse of access, policy violations, or other human-centric security risks • Experience managing complex investigations from initial intake through evidence collection, analysis, stakeholder engagement, reporting, and remediation • Experience working with Data Loss Prevention (DLP), Insider Risk Management, SIEM, UEBA, eDiscovery, digital forensics, or related investigative technologies • Experience investigating activity across endpoints, cloud, collaboration, email, identity, and data protection platforms Benefits Medical Insurance • Dental • Vision • Life insurance • Accidental death and dismemberment • Short-term and long-term Disability Insurance • Parental Leave • Employee Assistance Program (EAP) • Traditional and Roth 401(k) with company match • Flexible Spending Account (FSA) • Employee Stock Purchase Plan at 5% discount • Critical Illness Insurance • Accident Insurance • Transportation and Commuting Benefits • Banking Benefits • Pet Insurance Compensation The estimated salary range for this role is $150,000.00 - $165,000.00, along with eligibility to earn an annual bonus. Actual salaries may vary based on several factors, such as a candidate’s qualifications, skills and experience. #LI-Hybrid #LI-JB1 From our first day in business, Wintrust has been proud to serve a variety of unique communities and people from all walks of life. To build a company that reflects the communities we serve, we believe that fostering a unique and inclusive workplace where everyone feels valued and empowered to succeed will support our ongoing success. Wintrust Financial Corporation, including community banking and financial services subsidiaries, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.