Security Awareness Program Lead

Security Awareness Program Lead

Fitch Group is currently seeking an Associate Director of Security Awareness based out of our New York or Chicago office.

This position is part of the Technology Risk team, reporting directly to the head of Technology Risk Strategy & Programs. Technology Risk is responsible for enabling the firm to deliver against its strategic goals by reducing the risk of significant security incidents and data breaches.

What We Offer:

• The Technology Risk Team is uniquely positioned in the firm to help the business identify, understand, and address information security risks. Being in this role enables you to work with many wonderful teams across Fitch and have high visibility across the firm
• Opportunity to lead a program on a high performance team

We’ll Count On You To:

• Security Awareness Training and Education: Design and deliver engaging training sessions, workshops, and e-learning modules to educate employees on best practices for cybersecurity. This includes new hire, annual, and ad-hoc trainings.  
• Develop and Implement Role-Based Awareness Training: Create and execute role-based cybersecurity awareness trainings tailored to various departments and roles within the organization.
• Execute National Cybersecurity Awareness Month Activities: Plan and implement activities and communication for the organization as part of National Cybersecurity Awareness Month. This includes interactive activities, informational articles and other communications.
• Execute Phishing Testing Program: Design and execute firmwide and group-based phishing campaigns to educate and empower users to identify and report phishing emails. Manage repeat clicker education program to help further educate users and enhance resiliency.
• Communication Strategy: Develop effective communication strategies in collaboration with Employee Communications to promote cybersecurity awareness and ensure consistent messaging across the organization. Publish monthly cybersecurity newsletter to raise awareness and promote cybersecurity. Utilize and regularly update intranet sites for effective communication across organization
• Business Engagement: Work closely with various business units to ensure alignment and support for awareness activities.
• Employee Engagement and Culture Building: Foster a culture of cybersecurity awareness and responsibility across the organization. Encourage employee participation in awareness activities and recognize their contributions to improving cybersecurity.
• Continuous Improvement: Stay current with the latest trends and best practices in cybersecurity awareness and incorporate them into the program.

What You Need to Have: 

• 5-6 years of experience in cybersecurity awareness, training, risk management, or a related field.
• Strong understanding of cybersecurity principles and human factors in security.
• Excellent communication, presentation and writing skills.
• Ability to create engaging and effective training materials.
• Strong analytical skills to assess program effectiveness.
• Strong creativity and innovative thinking abilities
• Proactive and able to work independently and as part of a team.
• Strong interpersonal skills and the ability to influence and engage stakeholders at all levels.
• Prior experience developing training