Corporate Vice President, Information Security, Training & Awareness Lead

 

Location Designation: Hybrid - 3 days per week 

 

 

This position is hybrid - Tuesday - Thursday in the New York Office and Monday and Friday work from home. 

Role Overview:

We are seeking an experienced leader to drive enterprise-wide cybersecurity and risk education and awareness programs to safeguard our organization and embed a strong risk-aware culture. This role is accountable for designing and managing programs that reduce human-related vulnerabilities, ensure compliance with regulatory frameworks, and provide credible reporting to senior leadership, the Risk Steering Committee, the Office of the CISO, Chief Risk Officer, Board, and Audit Committee.

This role requires a candidate with cybersecurity, enterprise risk, compliance, and training program design experience. The successful candidate will be recognized as a trusted authority who can engage employees at all levels and influence cultural change across the enterprise.

What You'll Do:

Cybersecurity & Risk Awareness
• Lead the enterprise-wide information security training program, ensuring alignment with regulatory requirements (NYDFS, etc.).
• Partner with the Office of the CISO, Cyber Threat Intelligence, and Security Operations teams to develop and manage a strategic roadmap that identifies needs, sets priorities, and ensures a cohesive curriculum and core concepts.
• Design, execute, and evaluate awareness campaigns (e.g., phishing simulations, targeted risk education) that drive measurable behavior change.
• Translate complex security threats and risks into clear, actionable guidance for all employee audiences.
• Support the onboarding security education for new hires, embedding a strong risk-aware mindset from day one.
Enterprise Risk Culture & Engagement
• Support and deliver training across key enterprise risk domains, including fraud prevention, third-party risk, operational risk, and emerging technologies (e.g., AI protocols).
• Partner with Risk Management and corporate functions to support enterprise-wide risk communication initiatives (e.g., newsletters, “Food for Thought” sessions, leadership forums).
Program Oversight & Reporting
• Establish standards, guidelines, and metrics to evaluate program effectiveness.
• Provide consistent reporting to the Office of the CISO, Chief Risk Officer, Board, and Audit Committee on training performance, simulation outcomes, and employee awareness trends.
• Leverage data insights to continuously refine and improve awareness initiatives.

 

What You'll Bring:
• Bachelor’s degree with Security experience.
• Knowledge of core cybersecurity topics and terminology (e.g., phishing, smishing, vishing, ransomware, password security, multifactor authentication, insider threats) and the ability to translate them into accessible training and awareness content.
• Experience in Change Management, Learning & Development, or Communications.
• Demonstrated success in designing, executing, and measuring security awareness initiatives.
• Strong understanding of risk management and regulatory frameworks (NIST, ISO, CIS, NYDFS)
• Strong communication and presentation skills with the ability to influence across all organizational levels.
• Strong project management skills, with experience leading cross-functional initiatives.
Preferred Qualifications
• Industry-recognized certifications such as CISSP, CISM, SSAP, or equivalent.
• Specialized training or certifications in security awareness (e.g., SANS, ISC², Proofpoint, KnowBe4).
• Proficiency with designing and delivering enterprise learning programs, including compliance training, role-based training, and awareness campaigns, with a strong grounding in adult learning principles and instructional design best practices.
• Experience with data visualization and engagement platforms (e.g., Tableau, WordPress, Interact).

#LI-VL1
#LI-HYBRID 

​

Pay Transparency

Salary Range: $116,000-$166,000 

Overtime eligible: Exempt 

Discretionary bonus eligible: Yes 

Sales bonus eligible: No 

Actual