Lead Security Awareness

The Lead Security Awareness will be responsible for developing, implementing, and managing a comprehensive security awareness program to educate employees across all levels of an organization about cybersecurity best practices, policies, and threats, aiming to cultivate a strong security culture by promoting safe behaviors and minimizing cyber risks through engaging training initiatives and communication strategies; key responsibilities include designing training content, conducting phishing simulations, tracking program effectiveness through metrics, and collaborating with other security teams to identify and address emerging threats. The role is responsible for creating and reporting trending metrics to executive leadership on campaigns conducted and success of program. This individual liaises with the head of Governance, Human Resource Training Teams, Compliance and other personnel across the company. They will conduct group training(s) to at risk groups to increase awareness of cybersecurity threats related to their role. They will review, update and create content for annual and new hire security and compliance trainings.

• Strategy Development:
  • Create and maintain a comprehensive security awareness strategy aligned with the organization's overall cybersecurity goals and risk management framework.
  • Identify key security awareness priorities based on risk assessments and compliance requirements.
  • Design Gamification & Rewards
• Training Program Design and Delivery:
  • Develop engaging and relevant security awareness training content for various employee levels, including new hires, managers, and technical staff.
  • Utilize diverse training modalities like e-learning modules, videos, interactive exercises, webinars, and in-person workshops.
  • Tailor training content to specific roles and departments to address their unique security concerns.
• Campaign Management:
  • Execute regular security awareness campaigns to educate employees on current cyber threats, phishing tactics, password hygiene, data protection, and other critical security concepts.
  • Develop, configure, and launch targeted phishing simulations to assess employee awareness and provide timely feedback.
  • Manage repeat clicker education program to help further educate users and enhance resiliency.
• Metrics and Reporting:
  • Monitor and measure the effectiveness of security awareness programs through key metrics such as training completion rates, knowledge retention, and incident reduction.
  • Generate reports for senior management highlighting program successes and areas for improvement.
• Communication and Collaboration:
  • Partner with other security teams to identify emerging threats and incorporate relevant information into training programs.
  • Collaborate with department heads and HR to promote security awareness across the organization.
  • Communicate security policies and procedures clearly to employees through various channels.
• Develop and Implement Role-Based Awareness Training:
  • Create and execute role-based cybersecurity awareness trainings tailored to various departments and roles within the organization.
• Execute National Cybersecurity Awareness Month Activities:
  • Plan and implement activities and communication for the organization as part of National Cybersecurity Awareness Month. This includes interactive activities, informational articles and other communications.
• Communication Strategy:
  • Develop effective communication strategies in collaboration with Employee Communications to promote cybersecurity awareness and ensure consistent messaging across the organization.
  • Publish monthly cybersecurity newsletter to raise awareness and promote cybersecurity. Utilize and regularly update intranet sites for effective communication across organization
• Business Engagement:
  • Work closely with various business units to ensure alignment and support for awareness activities.
• Continuous Improvement:
  • Stay current with the latest trends and best practices in cybersecurity awareness and incorporate them into the program.

• Proven previous experience in successfully executing cybersecurity programs
• 5-6 years of experience in cybersecurity awareness training experience, risk management, or a related field.
• Strong understanding of cybersecurity principles, threats, and best practices Prior experience developing training materials/courses
• Prior experience creating and/or managing security awareness programs
• Prior experience designing and executing phishing campaigns
• Prior experience with security champion/advocate programs
• Ability to develop concise but informative cybersecurity publications
• Excellent communication, presentation and writing skills.
• Ability to create engaging and effective training materials.
• Strong analytical skills to assess program effectiveness.
• Strong creativity and innovative thinking abilities
• Proactive and able to work independently and as part of a team.
• Strong interpersonal skills and the ability to influence and engage stakeholders at all levels.
• Highly organized with strong project management skills
• Knowledge of MS Excel, MS Power Point, JIRA , SharePoint and Confluence
• Excellent communication and presentation skills to effectively deliver training materials
• Ability to analyze data and generate insightful reports on security awareness program effectiveness
• Familiarity with relevant compliance regulations (e.g., PCI, SOX)

Standouts in a candidate:

• Undergraduate degree in the Cybersecurity field
• Certifications such as CISSP