Cybersecurity Awareness Delivery Manager

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Position Summary:

The Cybersecurity Awareness Delivery Manager role is critical in developing and executing cybersecurity awareness programs to educate and inform employees about security best practices, risks, and policies. This role will focus on delivering effective training and awareness initiatives to foster a security-conscious culture throughout the organization. Working closely with the Training and Awareness Service Manager, the individual will take ownership of the design, delivery, and continuous improvement of cybersecurity awareness campaigns and online training instructional design, leveraging industry best practices.

With 7+ years of experience in adult learning, internal communications or related fields, the ideal candidate will have expertise in developing cybersecurity training content and managing awareness programs. The role requires strong project management skills and the ability to work independently, applying professional expertise to create impactful security training & awareness programs that address evolving cyber threats.

Key Responsibilities

1. Develop and Deliver Cybersecurity Awareness Programs 20%

• Lead the creation and execution of comprehensive internal cybersecurity awareness campaigns using omni-channel communications that address key security threats, policies, and best practices. Tailor content to different employee audiences to ensure maximum engagement and impact.

2. Create Engaging Training Content 20%

• Design and develop engaging training materials with adult learning principles in mind, including e-learning modules, presentations, digital signage, videos, articles, and instructor-led workshops. Ensure content aligns with organizational goals and is accessible to a diverse workforce.

3. Monitor and Evaluate Program Effectiveness 10%

• Regularly assess the effectiveness of training and awareness initiatives through feedback, surveys, and cybersecurity metrics. Identify areas for improvement and refine the programs based on data and emerging threats.

4. Collaborate Across Departments 15%

• Work closely with cross-functional teams, including IT, communications, and HR, to ensure the alignment of cybersecurity messages and training efforts across the organization. Partner with teams to prioritize projects and manage the full lifecycle of instructional design and awareness campaigns projects.

5. Lead Awareness Campaigns and Initiatives 15%

• Spearhead security awareness campaigns to raise awareness on an ongoing basis. Use creative communication methods to ensure broad participation and awareness.

6. Identify and Address Gaps in Knowledge 10%

• Proactively identify areas of cybersecurity knowledge gaps within the organization and recommend targeted training solutions to mitigate risks. Evaluate the effectiveness of training programs using innovative measurement methods.

7. Stay Current with Cybersecurity Trends and Threats 10%

• In partnership with cybersecurity team members, continuously monitor the cybersecurity landscape to identify new trends, threats, and best practices. Ensure training content remains up-to-date and relevant to the organization's evolving needs.

Minimum Job Qualifications (Knowledge, Skills, & Abilities):

Education/Training –

• Bachelor’s degree in Adult Learning, Communications, or a related field; or equivalent experience.

Business Experience –

• 7+ years of experience in cybersecurity awareness, training, communications or a similar role; or an advanced degree with a minimum of 5 years of relevant experience.

Specialized Knowledge/Skills –

• Strong understanding of cybersecurity concepts and the ability to translate technical information into engaging, non-technical content.
• Excellent communication skills with the ability to engage a wide range of audiences.
• Strong understanding of instructional design principles and methods, as well as experience with a variety of authoring tools, including Articulate, Microsoft Suite, Sharepoint.