Cybersecurity Culture and Awareness Analyst

Cybersecurity Culture and Awareness Analyst

Join to apply for the Cybersecurity Culture and Awareness Analyst role at Ascot Group

This is an opportunity to join Ascot Group - one of the world’s preeminent specialty risk underwriting organizations. Designed as a modern-era company operating through an ecosystem of interconnected global operating platforms, we’re bound by a common mission and purpose:
One Ascot. Our greatest strength is a talented team who flourishes in a collaborative, inclusive, and entrepreneurial culture, steeped in underwriting excellence, integrity, and a passion to find a better way, The Ascot Way. The Ascot Way guides our people and our organization. Our underwriting platforms collaborate to find creative ways to deploy our capital in a true cross-product and cross-platform approach.

These platforms work as one, deploying our capital creatively through our unique Fusion Model:
Client Centric, Risk Centric, Technology Centric. Built to be resilient, Ascot maximizes client financial security while delivering bespoke products and world class service — both pre- and post-claims. Ascot exists to solve for our clients’ brightest tomorrow, through agility, collaboration, resilience, and discipline.

The Cybersecurity Culture and Awareness Analyst will join Ascot’s Cybersecurity Governance, Risk & Compliance (GRC) function and will work on several activities across the GRC function, with a primary focus on promoting a strong Cybersecurity Awareness Culture throughout the organization. In this role, you will be responsible for designing, developing, and delivering effective Cybersecurity training programs for our employees. You will also develop, execute, and monitor methods to evaluate cybersecurity awareness of colleagues for continuous improvement purposes.

Additionally, you will be responsible for creating and implementing effective communication strategies to keep company assets secure and employees informed, engaged and cyber-safe using various channels and formats. This is a global role with a unique opportunity to participate in activities across the GRC function and to interact with colleagues at all levels across the entire organization. This role will be in the office with a hybrid work schedule.

• Cybersecurity Training:
  • Assess the learning needs of the different role and audience demographics, designing and customizing training materials tailored to those needs.
  • Liaise with subject matter experts to develop and deliver comprehensive training programs focused on diverse Cybersecurity topics.
  • Evaluate the effectiveness of training programs through feedback and statistics.
  • Collaborate with IT, HR, Legal and Compliance teams to ensure training aligns with organizational policies and regulatory requirements (e.g., NY DFS, GDPR, NIST, ISO 27001).
• Awareness Communications:
  • Educate Users so that they are better prepared to understand, identify and respond to potential cyber threats via the following methods:
    Marketing Newsletter, Blog Posts, Cybersecurity Hub content, AI/Deepfake technology, Cyber Champions network and Roadshows.
  • Stay up to date with the latest trends, technologies, and threats in the Cybersecurity landscape to ensure training materials stay current and relevant.
  • Create customized and engaging communications content.
• Phishing and Social Engineering Simulations:
  • Develop and execute simulations across the Ascot organization.
  • Monitor the actions taken by colleagues on simulations and utilize the consequence management process to improve colleague response.
• Human
  
  Risk Management:
  • Identify and target key audiences and channels for communications and additional training based on attack potential data and other criteria.
• Policies and Standards Maintenance:
  • Coordinate updates to the cybersecurity policies and standards, managing the annual review, update and release cycle.
• Perform ad hoc efforts in support of other Cybersecurity GRC functions as needed.
  • Build, manage and maintain relationships with training vendors, and constantly evaluate vendor capabilities and partnerships.
• Identify emerging technologies, and methods to promote cybersecurity awareness and…