Information Security Analyst

Why PlayStation?

PlayStation isn’t just the Best Place to Play — it’s also the Best Place to Work. Today, we’re recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation®5, PlayStation®4, PlayStation®VR, PlayStation®Plus, acclaimed PlayStation software titles from PlayStation Studios, and more.

PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.

The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Corporation.

Role Summary 

Information Security Governance, Risk and Compliance is looking for a Security Awareness Analyst to become a member of the team at PlayStation. Located within regular commuting distance of our Rancho Bernardo San Diego, CA office, the successful candidate will develop, build, and deliver an outstanding Security Awareness Program to employees worldwide. With so much creative talent at PlayStation, the possibilities are many and really only limited by the imagination and influence of the individual!

Responsibilities

1. Program Development [20%]

• Contribute and support an engaging Security Awareness Program that influences attitudes and changes behaviors to build a safer work environment. 

• Ensure the Program meets Sony Group compliance requirements and relevant industry regulations and standards. 

• Socialize the Program to other teams and promote its adoption, taking into consideration different cultures, nationalities and languages. 

• Solicit feedback from colleagues and partners to identify gaps and opportunities to evolve the Program. 

• Continuously evaluate and manage Program vendors and services. 

• Analyze metrics, derive insights, and prepare consolidated reporting illustrating the impact of the Program effectiveness. 

2. Operations [40%]

• Acquire and curate content for the Program. 

• Regularly deliver cyber security training globally. 

• Regularly deliver simulated phishing emails globally. 

• Oversee the delivery of training and phishing in business units outside the Program. 

• Troubleshoot user issues and liaise with internal stakeholders and external vendors to resolve them. 

• Administrate SaaS services used to deliver training and simulated phishing emails. 

• Regularly prepare and send reports to management. 

• Create engaging content to ensure that the Program message is heard and applied in diverse and original forms (e.g. articles, posters, board games, videos, flyers, learning modules). 

• Publish content to Intranets. 

• Coordinate the delivery of security advisories and urgent communications to a global employee audience through the Corporate Communications department. 

• Organize and host events through a variety of mediums (e.g. online webinars, lunch-and-learns, workshops, and seminars). 

• Conduct security awareness assessments and surveys to gaug