Responsibilities:

• Mature and maintain the strategy, goals, and objectives for the information security awareness and training program, including repeatable processes, reporting and metrics;
• Adapt strategy to incorporate and address emerging technologies and risks;
• Contribute to creating a culture of security by growing awareness, engaging departments and users in security, and reducing risky behaviors;
• Ensure that our information security awareness and training program communicates firm security policies and requirements so that users know, understand, and are able to follow them;
• Identify the top human risks to our organization and the behaviors needed to change to mitigate those risks and define achievable, observable, and measurable learning objectives (skills);
• Ensure multiple learning styles are included in the course design by using various communication channels;
• Continuously evaluate the effectiveness of existing information security training, education, and awareness program/activities;
• Collaborate with information security team to identify areas of risk and develop targeted and roles-based information security training, education, and awareness activities; and

Requirements

• Bachelors degree required
• 7+ years of work experience in the Information Security sector
• Working knowledge of NIST Cybersecurity Framework (CSF)
• A basic knowledge of information security and risk mitigation principles, theories, and techniques in daily work;
• Demonstrated understanding and use of basic project management methodologies, including the ability to plan, manage and maintain a complex, organization-wide program over the longer term;
• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel;