GRC Analyst

Job Title: Sr. GRC Analyst

Brentwood, TN (3 days on-site)

We are seeking a highly skilled and experienced individual to fill the position of Senior Cybersecurity Awareness, Training, and Communications Analyst. You will be reporting to the Director of Cybersecurity Governance, Risk and Compliance. In this role, you will be responsible for developing and implementing comprehensive cybersecurity awareness programs, conducting effective training sessions, and ensuring clear communication strategies to enhance the organization's overall cybersecurity posture.

Responsibilities:

1 Cybersecurity Awareness Program:
* Develop and implement a strategic cybersecurity awareness program to educate employees at all levels about cybersecurity threats, best practices, and company policies.
* Collaborate with cross-functional teams to tailor awareness initiatives to address specific organizational risks and needs.
* Evaluate cyber security education, training, and awareness program efficiency by identifying and gathering workforce trend analysis, performance improvement metrics, and then actively shape new products to address gaps, provide top-of-mind awareness of the cyber threat landscape, emerging threats, and best practices to follow.
* Prepare and execute phishing campaigns based on current threats and provide statistics.
* Provide metrics on the effectiveness/completion rate for courses.
* Execute cyber awareness roadshows, Cybersecurity Awareness Month, and other initiatives, such as Cybersecurity Ambassador Program.

2. Training Development and Delivery:

* Create engaging and interactive training materials that cater to different learning styles and levels of technical expertise.
* Conduct regular cybersecurity training sessions for employees, ensuring that content is up-to-date, relevant, and aligned with industry standards.

3. Communication Strategy:

* Develop and execute communication plans to keep employees informed about cybersecurity policies, incidents, and emerging threats.
* Design and maintain communication channels, such as newsletters, intranet updates, and other platforms, to promote cybersecurity awareness.
* Prepare and deliver communications for CISO and other executives for awareness initiatives.
* Ensure security policies are communicated through security awareness programs so that team members know, understand and follow them.
4. Collaboration and Relationship Building:
* Collaborate with IT security teams, HR, and other departments to align cybersecurity awareness efforts with organizational goals and objectives.
* Foster a culture of collaboration and information sharing to enhance overall cybersecurity resilience.
5. Monitoring and Evaluation:
* Implement metrics and key performance indicators (KPls) to measure the effectiveness.
6. Other Activities:
* May lead projects or project steps within a broader project or may have accountability for on-going activities or objectives; looks for business improvement opportunities.

Qualifications:

* Bachelor's degree in Cybersecurity, Information Technology, Communications, or a related field
* Proven experience (4 years) in a similar role, demonstrating successful implementation of cybersecurity awareness programs and training initiatives.
* Strong oral and written communication skills with the ability to convey complex cybersecurity concepts in a clear and understandable manner.
Advanced proficiency in Microsoft Excel for metrics reporting, data analysis and other reporting requests.
In-depth knowledge of adult leaming principles and the ability to tailor training programs to diverse learning styles.
* Proven experience in creating and implementing cybersecurity awareness initiatives in a corporate environment.
* Prior experience using training platforms such as KnowBe4 or Proofpoint.
* Solid facilitation skills.
* Familiarity with social platforms pushing content through social media
* Strong project management skills with the ability to manage multiple initiatives simultaneously.
* Experience using technology platforms to conduct learning and development experiences.