Cybersecurity Training and Awareness Specialist

Location:

Geisinger Office Building I (GOB I)

Shift:

Days (United States of America)

Scheduled Weekly Hours:

40

Worker Type:

Regular

Exemption Status:

Yes

Job Summary:

The Cybersecurity Awareness and Training Specialist plays a critical role in safeguarding patient data and healthcare infrastructure by educating staff on cybersecurity best practices. This position is responsible for developing, implementing, and maintaining a comprehensive cybersecurity awareness and training program, addressing human risk and tailored to the unique needs of a healthcare environment, ensuring compliance with HIPAA and other regulatory requirements.

Job Duties:

• Supports Executive leadership with the strategic planning and delivery of communication strategies to meet departmental objectives, security policy and the awareness program.
• Develops and maintains strong working relations with corporate communications and ensure compliance of training and awareness products with corporate style and branding requirements.
• Designs and delivers engaging cybersecurity awareness training programs for clinical and administrative staff.
• Develops customized training modules and marketing collaterals addressing phishing, social engineering, data privacy, and secure use of medical devices.
• Creates educational materials such as videos, guides, posters, and interactive simulations.
• Conducts live in-person and virtual training sessions across departments.
• Manages phishing simulation campaigns and analyze results to improve user awareness.
• Monitors and reports on training effectiveness using metrics and feedback; recommend improvements.
• Develops and manages content for SharePoint sites and manage access and creation of new sites.
• Makes appropriate use of internal communication channels, such as Viva Engage or similar products.
• Translates technical, complex subject matter into lay language appropriate to the target audience.
• Works closely with IT, HR, and Privacy teams to integrate cybersecurity awareness into onboarding and ongoing education.
• Ensures training content aligns with HIPAA, HITECH, and other healthcare-specific regulations.
• Supports incident response efforts by providing post-incident training and awareness reinforcement.
• Serves as editorial resource for the team for document and presentation drafting and review.
• Assists subject matter experts (SMEs) in tracking and maintaining the ISO policy library and maintaining compliance.
• Conducts periodic risk assessments and program reviews related to human risk in cybersecurity.
• Promotes a culture of security awareness throughout the organization.
• Stays current with emerging threats and trends in healthcare cybersecurity.
• Be the cybersecurity advocate and resource for employees with questions or in need of assistance.

Work is typically performed in an office environment. Accountable for satisfying all job specific obligations and complying with all organization policies and procedures. The specific statements in this profile are not intended to be all-inclusive. They represent typical elements considered necessary to successfully perform the job.

Position Details:

Must-Have Skills:

• Effective Cyber Training and Awareness Communication
• Friendly Phishing
• Strong Communication Skills
• Team Player

Expected Deliverables:

• Cybersecurity Training and Awareness Program
• Management of Friendly Phishing Program
• Technical/Non-technical Communications

Education:

High School Diploma or Equivalent (GED)- (Required)

Experience:

Minimum of 5 years-Relevant experience* (Required)

Certification(s) and License(s):

Skills:

Computer Literacy, Critical Thinking, Interpersonal Communication, Organizing, Teamwork

OUR PURPOSE & VALUES: Everything we do is about caring for our patients, our members, our students, our Geisinger family and our communities.

• KINDNESS: We strive to treat everyone as we would hope to be treated ourselves.
• EXCELLENCE: We treasure colleagues who humbly strive for excellence.
• LEARNING: We share our knowledge with the best and brightest to better prepare the caregivers for tomorrow.
• INNOVATION: We constantly seek new and better ways to care for our patients, our members, our community, and the nation.