Information Security Analyst

Job Description

The Security Awareness Analyst is focused on driving security awareness that is being rolled out globally. The role includes working with a learning management system (LMS), configuring awareness campaigns, managing awareness content, and assisting to develop training content. Strong communication skills are a must as the candidate will be supporting colleagues globally. Managing the administration of the Security Champions Network, setting agenda for the bi-monthly meetings, taking minutes are key activities. Setting workshops with Security Champions and documenting challenges and identifying solutions is a key requirement. Onboarding new security champions, contributors and advisors and managing Microsoft Team channels to answer questions and post updates are minimum requirements. There is a great degree of autonomy and opportunity to be creative with awareness and culture change training development. Experience of using content development solutions such as Synthesia would be an advantage, though training will be provided. The role is very hand on with light weight day-to-day management. Confidence in writing news articles on relevant security topics to be posted on the MS Teams Security Champions Network channel would be advantageous.

The Specialist will work under the responsibility of the Head of IS Services and Risk Management and will report to the Security Awareness Program Lead. This is a hands-on role where the Senior Lead will be expected to work in a relatively small team of experts. The responsibilities of the role will include the following:

• Support the security culture program that aligns with Client's security policies and objectives.
• Good communication skills to assist business colleagues making the transition to security champions.
• Support a community of security champions.
• Identify and support champions, recognising and rewarding their contributions.
• Build relationship, foster camaraderie and trust.
• Resolve community issues and concerns.
• Develop engaging training materials, workshops, and e-learning modules to educate employees on security best practices.
• Create and distribute communication materials, including newsletters, posters, and videos, to promote security awareness.
• Prepare and present regular reports on the progress and impact of the security culture program to senior management.
• Understanding of different methods used to train colleagues, campaigns, phishing, gamification.
• Strong understanding of Phishing, Smishing, Social Engineering and other common methods that are used by cyber-criminals to prey on employees.
• The ability to communicate with management and security staff.
• The ability to lead one-on-one or smalls group session with colleagues to teach them about security threats and how to follow company security awareness standards.
• Provide level one support to colleagues with questions about their training, logon challenges, or other inquiries.
• Have a technical background with operating security campaigns via an LMS. This would include an understanding of SCORM files, the ability to upload SCORM files and test content, and the ability to setup and monitor training modules.
• Understanding of different methods used to train colleagues, campaigns, phishing, gamification.
• Strong understanding of Phishing, Smishing, Social Engineering and other common methods that are used by cyber-criminals to prey on employees.
• The ability to write Welcome, Reminder and Past due templates that will delivered by the LMS.
• The ability to write blogs about security awareness
• The ability to lead one-on-one or smalls group session with colleagues to teach them about security threats and how to follow company security awareness standards.