Manager, Information Security (Cyber Culture) - Remote

 

Logistics at full potential. 

 

At GXO, we’re constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our team, you’ll have the support to excel at work and the resources to build a career you can be proud of.

 

As the Manager, Information Security (Cyber Culture), you will lead the development and implementation of initiatives to improve workforces’ cyber behaviors and advance our cyber culture. You will create engaging medium to help colleagues at all levels understand their responsibilities and the threats we face.

Pay, benefits and more.

We are eager to attract the best, so we offer competitive compensation and a generous benefits package, including full health insurance (medical, dental and vision), 401(k), life insurance, disability and more.

 What you’ll do on a typical day:

·         Oversee the enhancement of our Human Risk Management platforms, monitoring our workforces’ cyber behaviors, and developing technical and non-technical measures to respond to risky actions taken.

·         Direct and upskill colleagues through our company-wide and targeted learning initiatives, from needs analysis and content development to deployment.

·         Shape and deliver clear, inclusive and on-brand proactive and reactive communications, partnering with internal communications and key stakeholders to promote the subject and maintain a variety of knowledge channels.

·         Monitor the outcome of training activities against defined behavioral metrics, building automated and effective reports to demonstrate human cyber risk reduction, program maturity and compliance.

·         Act as a ‘Human Security’ SME, liaising cross-functionally to ensure human behaviors are factored into, and considered during, the design of information security software and policies.

·         Maintain relationships with Information Security training vendors and third parties operating within this field.

·         Line manage and coach a team of Cyber Culture Specialists, including all aspects of performance management, development, conduct and recruitment.

  

What you need to succeed at GXO:

At a minimum, you’ll need:

·         Bachelor’s degree in Information/Cyber Security, Communications, Psychology, or another related discipline or equivalent related work or military experience

·         Security Awareness Professional Certification from a recognized professional body (e.g., SSAP)

·         Robust understanding of human risk management and behavior science concepts.

·         Understanding of technical information security controls and systems.

·         Ability to analyze and compare large quantities of data and identify patterns and trends.

·         Strong stakeholder management skills with the ability to collaborate, influence, and challenge decision-makers at all levels.

·         Team-oriented with a high degree of initiative coupled with the ability to work within a defined remit with limited oversight.

·         Ability to balance the need to develop strong positive working relationships while taking the difficult and unpopular decisions for the wider benefit as needed.

·         Working knowledge of training requirements defined within industry standards (e.g., ISO27001 series, NIST, etc.) and an understanding of current and emerging information and cyber security risks/threats.

·         Excellent communication skills, notably strong written, verbal and presentation/facilitation skills with the ability to translate technical language for non-technical audiences.

·         Implementing, managing, and administrating human risk management and simulated phishing platforms (e.g., CybSafe, CultureAI), and associated technology.

·         Building and deploying innovative and engaging communication campaigns and designing/creating training content (e.g., e-learning, presentations, animations/videos) suitable for global audiences.

·         Use of learning management systems (e.g., Wo