Sr Manager, Cyber Education and Awareness

Responsible for leading the Cybersecurity Education and Awareness program to help drive an incentivized cyber culture across our global company. This includes the annual strategy for education and awareness activities, running phishing and vishing tests and providing reporting to our businesses on ways our partners can improve, providing client awareness materials, develop and enhance our annual compliance training, etc. This is a program and people leadership role to build out a comprehensive program to drive positive culture change.

Responsibilities:

• Apply understanding of human nature, social science, cybersecurity fundamentals, and organizational culture to identify areas where corrective action may need to be taken to pre-empt developing threats and/or mitigate existing threats rooted in user conduct

• Lead the development, optimization, and delivery of high-quality cybersecurity Awareness training products in the form of briefings, newsletters, articles, webcasts, tip sheets, how-to guides, awareness communication materials and other web-based products to inform the workforce on cybersecurity risks and promote a cyber aware culture

• Lead enhancements to our phishing and vishing testing program to include increased frequency, various levels of difficulty, enhanced reporting to partners on good cyber hygiene, and targeted training for certain roles and human risk behaviors

• Write original articles and edit draft articles for publication on the company intranet and for special outreach channels including clients

• Creatively enhance our internal cybersecurity awareness sites to provide a full suite of awareness materials that are accessible to different partners in different media across learning styles and ensure contents are current adjusted for the changing cyber landscape

• Analyze, aggregate, and report phishing and vishing campaign results and trends; training compliance rate, identify opportunities to streamline and automate reporting

• Develop new Role-Based Training modules and remedial training content (e.g., CBTs, live presentations, recorded messages, et al) optimized for user requirements

• Partner with team as liaison between Cybersecurity Department, Corporate Communications, Corporate Training, Compliance, and Internal Audit

• Support the frequent modification of program documentation (e.g., standards, guidelines, procedures) and change process steps accordingly

• Ensure all program capabilities are in line with legal and regulatory requirements and lead discussions on all program capabilities with internal auditors, regulators, reviewers, stakeholders, and third parties

• Drive a program to ensure cybersecurity personnel have access to skillset development capabilities including planning and tracking group and individual training requirements

3-5 years building and leading a cybersecurity awareness program with people leadership experience as a preference

• Bachelor's degree or the equivalent combination of formal education and relevant experience is preferred. Experience in the financial industry is a plus

• Demonstrated oral and written communication skills across all levels of an organization to include senior leadership and external clients

• Understanding of the different medium available to provide learning materials across a variety of learning styles

• Understanding of the cybersecurity threat environment and the top human risk factors that a program should target improvements against

• Clear understanding in how leverage a variety of applications necessary for production of quality awareness materials to include Microsoft Office 365 applications, Visio, Adobe Creative Studio, or other design tools

• Experience running phishing programs and driving positive behavioral changes

• Strong understanding of deception-based attacks (e.g., phishing, social engineering, fraud, etc.)

• Understanding of information related frameworks and standards such (e.g., COBIT, NIST 800-53, NYDFS)

• Understanding of security workforce frameworks and professional education (e.g., NIST)