Sr. Information Security Analyst – Security Awareness in Training

TIAA has an opportunity for a Sr. Information Security Analyst – Security Awareness in Training. This role will be a part of the Global Cybersecurity & Fraud Management Awareness & Client Engagement team. This position will provide support to this function to include, but not limited to, promoting a security culture, publishing communications, and cybersecurity training initiatives.

Key Responsibilities and Duties

• Support enterprise associate-facing cybersecurity awareness functions, including, but not limited to, promoting a security culture, publishing communications, and cybersecurity training initiatives. 

• Support the research, development, and publication of associate-facing training materials covering the latest cybersecurity threats. Training materials may leverage various mediums such as video, online training courses, PowerPoint slides, and infographics. 

• Assist with course documentation updates on a routine basis to maintain current relevance.

• Monitor and support response to client requests for information about TIAA’s cybersecurity program.  Requests may include, but are not limited to, cybersecurity-related segments of Requests for Proposals (RFPs), Due Diligence Questionnaires (DDQs), requests for formally produced content about TIAA’s Cybersecurity program, and other client inquiries. 
• Manage and track client requests completion to ensure on-time delivery.  Manage timelines with stakeholders, as needed.
• Manage cybersecurity-related content in TIAA’s RFP database.  Ensure database content is reviewed per review schedule, continually updated, and improved for completeness, accuracy, and consistency, and expanded when appropriate. Manage out inefficiencies such as redundancies, obsolete questions and answers, and inaccurate categorization. 
• Support any related client response process improvements including, but not limited to, implementing automation, uplifting Standard Operating Procedures, and enhancing metrics and reporting. 
• Support tools for general cybersecurity inquiries from enterprise associates. 
• Identification, socialization, and implementation of any related process improvements including, but not limited to, implementing automation, uplifting Standard Operating Procedures, and enhancing metrics and reporting. 
• Collect and analyze data to identify problems that may be preventing the business function from running efficiently and effectively.
• Participate in special projects as required.
• Successfully complete all company training courses as required.

 

Educational Requirements

• University (Degree) Preferred

Work Experience

• 3+ Years Required; 5+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
7IC

Qualifications:

Required:

• Minimum of 3+ years’ experience working as an Analyst or in a similar-like role.
• Minimum of 3 years’ experience using MS Office Suite (i.e., Word, Power-Point, Excel, Outlook)

Preferred: 

• Bachelor’s degree in computer science, cybersecurity, communications, or relevant work experience. 
• Minimum of 2-4 years of experience working as an analyst or similar role within the Cybersecurity or Fraud Prevention disciplines. 
• Experience supporting Cybersecurity Awareness activities and/or IT-related communications. 
• Experience creating and editing content in various mediums such as videos, online training courses, infographics, and/or visual graphics. 
• Experience supporting RFP responses and/or client-facing content. 
• Experience managing RFP content databases. 
• Prior experience supporting cross-functional efforts engaging diverse business partners & providing reporting at various levels of the organization. 
• Familiarity with cybersecurity concepts, industry, and terminology. 
• Ability to communicate both orally and written to all levels of stakeholders.
• Ability to analyze and problem solve.
• Ability to multi-task.

#LI-VR1

Related Skills

Accountability, Adaptabilit