Technical Expert level III – Training Awareness and Communication Manager at Massmart

Summary

• The incumbent is required to develop learning and awareness programs to cultivate a culture of cybersecurity within Massmart. The incumbent will promote awareness of security issues and communicate security principles among management and stakeholders.

Responsibilities 

• Delivering the annual cyber security and awareness training by planning, and scheduling events and activities, executing phishing campaigns and follow-up activities, sending out cyber security related communications, articles and, and other activities as assigned
• Drafts and implements an annual cybersecurity training and awareness plan.
• Continuously assesses and understands the employee’s and end user’s susceptibility to cyber threats in relation to the human factor of information security to serve as requirements to the ongoing security awareness and education activities and initiatives
• Leads a multi-channel security awareness program involving key stakeholders throughout the organization, including business and corporate function representatives, to understand risks, business objectives, and policy requirements.
• Leads the creation and procurement of awareness deliverables and learning content, leveraging various channels for effective delivery and develops metrics to measure the usage of the content and its effectiveness.
• Drafts all internal cybersecurity communications and related programme materials using internal branding, such as newsletters, emails and other internal channels for the purpose of communicating cybersecurity awareness and training information.
• Executes periodic phishing tests, creating the appropriate reports to show the trends and, while performing any additional follow-up activities accordingly.
• Incorporates security awareness into internal virtual learning programmes, including new hire orientation, new manager training, and other events.
• Manages training records in the learning management system, and reports on the delivery and effectiveness of training.
• Develops, analyzes, and reports on security awareness metrics; works with key stakeholders to drive adoption of the security awareness program by providing key insights into the workforce’s security awareness, training, and behaviors related to using networks.
• Serve as a subject matter expert, with respect to information security education and awareness and own the overall awareness and education strategy and roadmap.
• Maintains contemporary knowledge of trends and technologies and assess applicability to the environment in the spirit of continuous service and capability improvement
• Performs other related duties as may be required

Requirements:

Minimum Academic, Professional Qualifications & Experience required for this position

• Minimum of five (5) years’ experience delivering enterprise-wide content communications, training and/or content management role within Cybersecurity.
• Training as evidenced by possession of Undergraduate Degree or equivalent training and education, from recognized institution in Information/Cyber Security, Computer Science, Computer Information Systems or other related field, years of experience will be considered.
• Knowledge of the concepts of cyber security risks and the different elements that make up risk.
• Knowledge of the NIST Cybersecurity Workforce Framework.
• Knowledge of phishing and cybersecurity training
• Knowledge of cybersecurity terminologies such as threats, vulnerabilities phishing, malware, etc
• Knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behavioral change necessary to reduce the ‘human factors’ risk.
• Knowledge of multiple cognitive domains and tools and methods applicable for learning in each domain.

Skills

• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
• Ability to apply principles of adult learning.
• Ability to develop or procure curriculum that speaks to the topic at the appropriate level for the target.
• Ability to plan, manage and maintain a complex, organization wide program over the longer term.
• Ability to develop and maintain policies, guidelines, and standards to help ensure a workforce informed of information security requirements and expectations on a learning platform
• Ability to exercise independent judgment and creative problem-solving.
• Ability to facilitate creative and strategic discussions in order to address emerging problems and opportunities.
• Ability to operate in a fast-paced, short deadline environment, and the ability to come up with innovative cost-effective decisions.
• Ability to establish and maintain effective professional relationships and interact with different stakeholders.
• Analytical and critical thinking skills
• Ability to use tact and diplomacy in the performance of duties.
• Ability to observe and maintain confidentiality in the performance of duties.