Associate Director, Security Awareness

Fitch Group is currently seeking an Associate Director of Security Awareness based out of our New York office.

This position is part of the Information Security team, reporting directly to the head of Information Security Strategy & Programs. Information Security is responsible for enabling the firm to deliver against its strategic goals by reducing the risk of significant security incidents and data breaches

How You'll Make an Impact:

• Security Awareness Training and Education: Design and deliver engaging training sessions, workshops, and e-learning modules to educate employees on best practices for cybersecurity. This includes new hire, annual, and ad-hoc trainings.
• Develop and Implement Role-Based Awareness Training: Create and execute role-based cybersecurity awareness trainings tailored to various departments and roles within the organization
• Execute National Cybersecurity Awareness Month Activities: Plan and implement activities and communication for the organization as part of National Cybersecurity Awareness Month. This includes interactive activities, informational articles and other communications.
• Execute Phishing Testing Program: Advance and execute firmwide and group-based phishing campaigns to educate and empower users to identify and report phishing emails. Manage repeat clicker education program to help further educate users and enhance resiliency.
• Communication Strategy: Develop effective communication strategies in collaboration with Employee Communications to promote cybersecurity awareness and ensure consistent messaging across the organization. Publish monthly cybersecurity newsletter to raise awareness and promote cybersecurity. Utilize and regularly update intranet sites for effective communication across organization.
• Metrics and Reporting: Establish metrics to measure the effectiveness of awareness programs and provide regular reports to senior management.
• Policy Development: Participate in the creation and revision of security awareness cybersecurity policies and procedures, ensuring they align with awareness initiatives.
• Business Engagement: Work closely with various business units to ensure alignment and support for awareness activities.
• Employee Engagement and Culture Building: Foster a culture of cybersecurity awareness and responsibility across the organization. Encourage employee participation in awareness activities and recognize their contributions to improving cybersecurity.
• Continuous Improvement: Stay current with the latest trends and best practices in cybersecurity awareness and incorporate them into the program.

You May Be a Good Fit If:

• 5+ years of experience in cybersecurity awareness, training, risk management, or a related field.
• Strong understanding of cybersecurity principles and human factors in security.
• Excellent communication, presentation and writing skills.
• Ability to create engaging and effective training materials.
• Strong analytical skills to assess program effectiveness.
• Strong creativity and innovative thinking abilities
• Proactive and able to work independently and as part of a team.
• Strong interpersonal skills and the ability to influence and engage stakeholders at all levels.
• Prior experience developing training materials/courses
• Prior experience running security awareness programs
• Working knowledge of AI-enabled productivity tools; ability to craft effective prompts and validate outputs.

What Would Make You Stand Out:

• Relevant certifications (e.g., CISSP, CISM, CISA) or any Degree in Cyber Security
• Proficiency in using e-learning platforms and other training tools
• Knowledge of MS Excel, MS Power Point, JIRA , SharePoint and Confluence
• Highly organized with strong project management skills
• Demonstrated thought leadership through cybersecurity publications
• Prior experience creating and/or managing security awareness programs