Information Security Analyst - Security Awareness & Training

Information Security Analyst - Security Awareness & Training

Description:

Permanent Full Time

-

The Senior Information Security Analyst – Security Awareness & Training plays a crucial role in our first line of cyber defense. This position involves collaborating with various stakeholders, including technology and business partners, to effectively manage information security risks and ensure compliance with organizational policies. Additionally, the role supports the delivery of analysis-driven cybersecurity services to our internal clients across Canada, US, and European segments.

We are seeking a highly skilled and experienced Senior Information Security Analyst to join our team in the Information Security & Technology Risk department. This role will primarily focus on security awareness and training. The successful candidate will play a critical role in implementing security awareness and training program requirements, enhancing the program based on evolving needs to elevate the security culture and drive behavioral change, and collaborating across our segments to improve the cybersecurity culture.

The ideal candidate should possess in-depth knowledge of security awareness and training, cybersecurity threats, risks, and mitigation strategies, along with the ability to communicate security concepts effectively to all levels of the organization.

• Develop, implement, and maintain security awareness and training program to educate employees on security best practices, threat prevention, and response procedures.
• Design targeted campaigns to address emerging threats such as phishing, deepfakes, AI assisted attacks, and social engineering.
• Evaluate and enhance training materials to ensure alignment with industry standards, regulatory requirements, and the evolving threat landscape.
• Create comprehensive security training learning paths tailored to various audiences within the organization.
• Manage user accounts, content updates, reporting functionalities, and other administrative actions through our security training platform.
• Create engaging training materials, including learning paths, lunch & learns, workshops, informational resources, webinars, and internal social media posts that promote a culture of security awareness.
• Track and report on training effectiveness and phishing simulation results, using data to continuously improve training programs.
• Plan and deliver on Cybersecurity Awareness Month programming, partnering with senior leaders across the organization to enhance cybersecurity culture.
• Keep up with the latest trends in cybersecurity threats and awareness training methodologies to ensure programs remain relevant and effective.
• Collaborate in the incident response tasks to analyze security incidents and develop training materials that address identified vulnerabilities.
• Strong desire to work collaboratively in an unconventional and non-linear way to problem-solve unique solutions.
• Be customer focused and delivery oriented to drive change in ambiguous situations.
• Collaborate proactively with internal clients to understand their needs and deliver creative solutions.
• Strive for continuous learning and can influence others.

• Bachelor’s degree from an accredited college or university or equivalent experience.
• Minimum five years’ experience as an information technology professional with at least three of those in information security demonstrating the accountabilities as listed above.
• Holds at least one information security certification or actively working towards at least one security certification (e.g. CISSP, CISM).
• Excellent communicator including demonstrated presentation and negotiation skills.
• Experience interpreting and consulting around meeting the requirements of the Information Security Policies and Standards for a large organization.
• Strong knowledge of IT control frameworks and regulatory requirements such as COBIT, ISO 27001, and the NISTcyber security framework; along with OSFI B13.
• Working knowledge of IT Audit processes, including design of control test procedures.
• Demonstrated ability to foster relationships and build trust.
• Ability to work independently and…