Security Awareness and Training Lead

ZS

ZS

About the Role:

Security Awareness & Training Lead

What you'll do:

• Design and lead a multiyear roadmap for security awareness, behavior, and culture change initiatives.
• Oversee the implementation and continuous improvement of the program.
• Maintain continuous improvement of the program aligned with business goals and security risk priorities.
• Collaborate with cross-functional teams and subject matter experts to create engaging and informative security awareness material for the program.
• Support the annual refresh of a global security awareness and training course at ZS. The program must follow the NIST800-50 and relevant regulatory requirements to reduce risk and impact a change in behavior.
• Act as a trusted advisor to help share the narrative of security around cybersecurity risk.
• Deliver and execute a year-round Security Ambassador program including high-risk training sessions and material.
• Maintain objectives of a repeatable security strategy, execute, and distribute interactive materials globally for the Security Awareness and Training Program.
• Support objectives of repeatable security strategy, execute, and distribute interactive materials globally for the Security Awareness and Training Program with IS communications team.
• Facilitate engagement of ideas and ensure goals of programs are met and measured.
• Define KPIs and success metrics for phishing, training and completion rates, behavioral risk, impact to organization and driving success for the organization.
• Continuously refine strategy, risk hotspots, and ensure policies and SOPs are updated accordingly. Respond to emerging risk with just in time training.
• Monitor and analyze the effectiveness of various communications initiatives and make data-driven recommendations for improvement.
• Manage tools and vendor decisions and platforms ensuring tools continue to support our needs.
• Align initiatives for SAT with internal policies and compliance needs and demonstrate program effectiveness for regulators or auditors.
• Maintain innovation and thought leadership, stay ahead of trends, participate in industry forums, and create a culture of continuous innovation in how awareness is delivered and measured.

What you'll bring:

• A bachelor's degree in information security, Computer Science, Information Technology, or a related field is preferred.
• Minimum 5 plus years of experience in information security, security awareness, or a related field.
• Strong ability to work independently and manage multiple tasks effectively.
• Excellent communication and presentation skills, with the ability to distill complex security concepts into clear and concise messages.
• Proven ability to work well in a collaborative environment.
• Experience in planning and executing training programs is a plus.
• Strong understanding of security best practices and current threats, as well as the ability to stay up to date with emerging trends in the field.
• Proficient in driving organizational behavioral change at scale.
• Ability to manage metrics and analytics.
• Strategic planning- experience building multi-year roadmaps and aligning with risk priorities
• Strong program management capabilities.
• Experience managing an Information Security Awareness program.
• Ability to build coalitions across security, HR, communications, legal and compliance.
• Diplomatic and credible with senior executives and risk owners.
• Creative thinker and ability to coordinate and execute programs with technical and non-technical associates.

• Certifications

  : CISSP, CISM, SSAP (SANS Security Awareness Professional), or similar
• Technical familiarity of security terminology, phishing simulation platforms, SAT platforms.