Scope of the Position

The Threat Intelligence Analyst is responsible for delivering timely, actionable intelligence that protects people, operations, facilities, and leadership activities worldwide. The role maintains continuous awareness of global security developments, rapidly triages and validates high‑volume alerts, and produces decision‑ready assessments that support business continuity and duty‑of‑care obligations.

In addition to core threat intelligence responsibilities, the role provides protective‑intelligence support for executive movements—including CEO travel and leadership itineraries—by monitoring risks along travel routes, destinations, venues, and events. The analyst ensures credible threats are escalated quickly and communicated in a concise, accurate, and operationally relevant format.

The position also supports traveler risk coordination during elevated threats through welfare checks, two‑way traveler communication, and collaboration with third‑party partners (e.g., International SOS) during disruptions or evacuations.

Key Accountabilities

Threat Monitoring, Triage & Escalation

• Monitor global security developments and emerging threats affecting executives, employees, sites, events, and business operations (e.g., civil unrest, crime, targeted violence, geopolitics, transportation disruptions, major public‑safety incidents).
• Maintain threat watchlists, risk triggers, and priority monitoring areas aligned with organizational risk appetite.
• Provide proactive traveler support during elevated risk situations through safety checks, status verification, and protocol‑aligned guidance.
• Coordinate with International SOS and internal stakeholders during major disruptions, including evacuation scenarios, to maintain situational awareness and enable timely assistance.

Protective Intelligence Support (Executive Travel & Leadership Activity)

• Deliver intelligence support for executive travel and leadership engagements through itinerary‑aligned threat overlays and destination risk snapshots.
• Track executive movements discreetly and maintain near‑real‑time situational awareness across time zones.
• Identify and escalate credible risks affecting leadership travel (e.g., protests, violence escalation, disruptions near hotels/venues/airports, route concerns, local security incidents).
• Provide pre‑travel and in‑trip updates optimized for fast operational decisions.

Social Media Monitoring & Early‑Warning Detection

Perform continuous social media monitoring to detect early indicators of:

• Protest mobilization and escalation signals
• Targeted threats and emerging violence
• Misinformation narratives impacting operations
• Reputational risk indicators (within policy boundaries)

Produce clear, timely social‑monitoring outputs and highlight significant changes in the threat environment.

Intelligence Products & Reporting

Produce high‑impact intelligence deliverables, including:

• CEO/Executive Travel Monitoring updates (pre‑travel, in‑transit, and in‑country updates as needed)
• Executive Trip Intelligence Assessments
• Event Threat Assessments (conferences, offsites, large gatherings)
• Site Intelligence Assessments (facility or venue‑focused, with surrounding‑area context)
• Global threat digests, hotspot updates, and emerging risk summaries

Leadership Skills Required

• Ability to work independently while coordinating with multiple stakeholders across time zones.
• Strong ownership and disciplined prioritization in fast‑moving environments.
• High discretion and integrity when handling sensitive leadership and travel information.
• Clear, concise communication for both operational teams and leadership audiences.
• Process‑driven mindset with a focus on accuracy, quality, and continuous improvement.

Professional Expertise / Knowledge

• Strong understanding of OSINT methodologies, alert triage, source evaluation, and corroboration.
• Familiarity with global risk domains (civil unrest, crime, targeted violence, geopolitical instability, travel disruptions).
• Working knowledge of duty‑of‑care concepts, traveler‑welfare protocols, and crisis‑time stakeholder communications.
• Understanding of incident lifecycle management and escalation protocols within a GSOC model.
• Knowledge of privacy, ethical collection boundaries, and secure handling of sensitive information.

Experience

• 1–3 years of experience in threat intelligence, GSOC/security operations, risk analysis, travel‑security support, or related security intelligence roles.
• Experience producing actionable assessments and supporting time‑sensitive monitoring, traveler coordination, and escalations.
• Exposure to global monitoring, leadership travel support, and social‑media risk monitoring is preferred.

Skills

• Rapid triage ability, sound judgment, and strong structured‑intelligence writing (BLUF style).
• Excellent written and verbal communication; calm coordination during high‑pressure events.
• Strong follow‑up, stakeholder management, and traveler‑welfare communication skills.
• Ability to manage multiple concurrent priorities with speed and accuracy.

Education

• Bachelor’s degree in any discipline, or equivalent practical experience.

Direct Reports

• None

Reporting Requirements

• Daily: Security Intelligence Digest, Security Intelligence Sync, time‑critical alerts
• Biweekly: China–Taiwan digest with verified updates and analytic judgments
• As Needed: Executive trip intelligence assessments, event threat assessments, site intelligence assessments, social‑media monitoring outputs
• Real‑time: Incident escalations, traveler‑welfare updates, situational reports during active events

Matrix Mentoring / Support

• Works closely with GSOC Operations, Corporate Security, Leadership Travel stakeholders, Regional Security, Travel, and EHS/Facilities.
• Coordinates with International SOS during travel‑risk events and crisis support.
• Receives operational guidance from Security Operations leadership and aligns deliverables to reporting and escalation standards.

Matrix Team

• GSOC / Corporate Security
• Regional Security
• Business Continuity Planning (BCP)
• International SOS (partner interface)

Updates

• Regular updates aligned with changes in the global risk landscape, internal SOPs, escalation pathways, and reporting standards.
• Continuous learning through internal refreshers, tool enhancements, and analytic‑tradecraft development.