Information Security Awareness Specialist

Overview:

A Security Awareness Specialist is responsible for designing, implementing, and managing a comprehensive security awareness training program within an organization, educating employees on cybersecurity threats, best practices, and how to identify and report potential security risks, aiming to cultivate a culture of cybersecurity across the company

Detail JD:

• Create engaging and relevant security awareness training modules covering topics like phishing recognition, password hygiene, data protection, and compliance regulations.
• Design and execute simulated phishing campaigns to test employees' ability to identify and report phishing attempts, measuring the effectiveness of training programs.
• Track key performance indicators (KPIs) related to security awareness training, such as completion rates, phishing click-through rates, and user behavior to identify areas for improvement.
• Develop and implement ongoing communication strategies to reinforce security awareness, including newsletters, posters, and internal messaging.
• Work closely with the IT security team, HR department, and other stakeholders to align security awareness training with organizational objectives and compliance requirements
• Assist in incident response activities by providing user education and awareness regarding potential security breaches.
• Capability to manage multiple training initiatives and meet deadlines.

Tools:

• KnowBe4 (mandatory)
• Learning Management System (LMS): Platform to manage and deliver security awareness training courses.
• Phishing Simulation Platform: Tool to create and deploy realistic phishing emails to assess employee awareness
• Communication Tools: Email, internal messaging platforms to disseminate security information and updates
• Security Awareness Training Content Library: Pre-built training modules covering various cybersecurity topics
• Reporting Dashboards: Visualize training data and metrics to track program effectiveness