Information Security training and Awareness Senior Analyst

The Information Security Awareness Senior Analyst is responsible for supporting GSK s global security awareness and training programs, educating all personnel and contractors of security threats they face in their jobs, and how to defend against them. Information Security Awareness Senior Analyst will also be responsible for supporting a global phishing assessment program under the direction of Information Security Awareness Senior Manager. This position develops and executes global and targeted security awareness campaigns virtually and measures the effectiveness of the campaigns. The objective of this position is to ensure that the security awareness program is effectively changing behaviors so our personnel act in a secure manner. Key Responsibilities: Provide comprehensive coordination and administrative support for the social engineering attacks, e.g. phishing, and simulations programme. Responsible for supporting that programme and coordinating any learning interventions that are required for people who fall for the simulations. Coordination of all activities related to communication to staff at all levels of the organisation, managing internal and customer-focused communications, assisting with data collection and analysis, creating learning assets and awareness materials Conducting detailed project activities, tracking progress, and reporting the outcomes Collaborate with internal GSK stakeholders and managed service partners representatives to recommend necessary security awareness to effectively mitigate risks to GSK Minimum Level of Job-Related Experience Required 5 to 10 years of proven experience in cyber security and/or third party security risk management Additional Responsibilities Evangelize security awareness processes across business lines to help influence a strong culture of proactive awareness Monitor and identify the top human risks to our organization and the behaviors we need to change to mitigate those risks Implement and support a positive security awareness program, which focuses on changing behaviors both at work and at home Support the creation and procurement of awareness deliverables and learning content, leveraging various channels for effective delivery in our global organization, measures the usage of the content and its effectiveness, and develops metrics Creating awareness materials with outputs of attack simulations and learning status as a result of consequence management piece. Developing Information Security awareness training and materials aligned to the risks associated with end users Developing content with technical subject matter experts using a clear and concise writing style that is appropriate to the intended audience Developing metrics to measure the success of the security awareness program Creating and cooperating with Third Party Vendor on simulating social engineering attacks across all GSK employees targeted for certain wave. Training administration Managing the information protection mailbox and coordinating responses back to employees Working closely with Global Learning & Development (GLD) to schedule and conduct various learning events Managing the translation of content and media into multiple languages Coordinating updates to InfoSec website