VP, InfoSec Training & Awareness Leader

Job Description:

Role Summary/Purpose:

The Information Security Training & Awareness Leader ensures best in class Information Security related training and awareness across Synchrony, in addition to leading internal training for the Information Security department. This role works closely with HR and our internal learning departments to create layers of effective and impactful programs, including training and awareness content, consistent and effective awareness campaigns and in-person training & road shows. The goal of the Infosec Training & Awareness Leader is to build an engaging and strong cybersecurity culture across the company that encourages communication and involvement.  In addition, the leader oversees, tracks, and facilitates ongoing development, training, and certification for employees of the Information Security department. 

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.  

Essential Responsibilities:

• Plans, develops, sources (internal /external) and delivers focused training programs and materials to educate Synchrony employees on a variety of Cybersecurity related disciplines including policies, standards, best practices, secure design, secure testing and other as-needed cybersecurity training. 

• Establishes, and then maintains, an understanding of information security awareness across the organization 

• Ensures awareness trainings, communications, and marketing are engaging and influence changes in employees’ behavior  

• Develops, iterates and continuously improves upon programs (Training, communication, cyber and table top exercises, etc) as appropriate 

• Works with relevant business units to improve security awareness and meet regulatory and compliance standards 

• Encourages employees to move beyond compliance of policies and toward adopting a security mindset  

• Encourages employee engagement with security broadly 

• Creates and manages a metrics framework that effectively measures employee compliance with information security policies and the overall effectiveness of the security awareness program 

• Assesses effectiveness of major programs using a metrics framework and incorporates employee feedback 

• Manages the Information Security Awareness Team 

• Manages Internal Training (e.g. PluralSite Administration, Certification Support, Onboarding Program, Rotation Program, Apprenticeship Program, SYF Leadership Training Coordinator, Lunch & Learns, etc.) 

• Develops new internal training programs (e.g. Onboarding Program, Rotation Program, Lunch & Learns, Institute R&D Program Management, Social Engineering, etc.) including materials