Our Client
Our client is a global leader in Testing, Inspection and Certification (TIC), delivering high quality services to help clients meet the growing challenges of quality, safety, environmental protection, and social responsibility.
We are hiring a Security Consultant (Awareness And Communication Specialist) to join the global security team.
Your FunctionsTo support the Cybersecurity GRC Manager in implementing and maintaining the organization's cybersecurity strategy, with a focus on cyber awareness, training, behavior change, and media communication, aligned with NIST CSF and ISO 27001 frameworks.
Key Responsibilities: Cyber Awareness and Training:
Develop, implement, and maintain a comprehensive cybersecurity awareness program for all employees.
Design and deliver engaging cybersecurity training materials, including e-learning modules, workshops, and simulations.
Tailor training content for different roles and levels within the organization.
Measure the effectiveness of awareness initiatives and training programs, and continuously improve based on feedback and results.Behavior Change Management:
Develop strategies to promote positive cybersecurity behaviors across the organization.
Implement behavior change campaigns to address specific security risks or challenges.
Collaborate with HR and management to integrate cybersecurity best practices into employee onboarding and performance evaluations.Media and Internal Communication:
Develop and maintain a cybersecurity communication strategy aligned with overall organizational goals.
Create and distribute regular cybersecurity updates, newsletters, and alerts to keep employees informed about current threats and best practices.
Act as a liaison with the Corporate Communications team for cybersecurity-related external communications and media inquiries.
Prepare briefing materials and talking points for leadership on cybersecurity matters.Risk Assessment and Management:
Perform risk analyses for internal projects and new business applications, focusing on human factors and awareness aspects.
Conduct assessments of the organization's cybersecurity culture and recommend improvements.
Support the Cybersecurity GRC Manager in maintaining the human-centric aspects of the organization's risk register.Security by Design:
Incorporate awareness and human factors considerations into the "security by design" framework.
Advise project teams on user-centric security measures from project initiation to go-live.
Provide guidance on secure application development from a user perspective.Stakeholder Management:
Act as a point of contact for business teams on cybersecurity awareness and communication topics.
Collaborate with IT, HR, and other departments to ensure consistent messaging and approach to cybersecurity.
Build relationships with external partners and industry groups to stay informed about best practices in cybersecurity awareness and communication.Position RequisitesEducation:
Masters degree in Computer Science, Information Security, Communications, or related field.
Relevant certifications (e.g., CISSP, CISM, NIST CSF Practitioner).Experience:
5+ years of experience in cybersecurity, with a focus on awareness, training, and communication.
Experience in developing and implementing cybersecurity awareness programs.
Experience in behavior change management and organizational communication.Knowledge:
In-depth understanding of NIST CSF and ISO 27001 frameworks.
Expertise in cybersecurity best practices and current threat landscape.
Knowledge of adult learning principles and training methodologies.
Understanding of behavior change theories and practices.
Familiarity with communication strategies and media relations.Skills and Abilities:
Excellent communication skills, both written and verbal.
Strong presentation and public speaking abilities.
Creativity in developing engaging and effective awareness materials.
Proficiency in using various communication tools and platforms.
Ability to translate complex technical concepts into user-friendly language.
Strong project management and organizational skills.
Adaptability and willingness to stay current with evolving cybersecurity trends.
Proficiency in project management and process improvement methodologies.
Ability to work in multi-geographic, multi-cultural teams.
#J-18808-Ljbffr