Senior Cybersecurity Awareness And Training Analyst

Children's National Hospital is seeking a dynamic and experienced Senior Security Awareness and Training Analyst responsible for developing, implementing, and managing a comprehensive security awareness program that educates employees about information security policies, procedures, and best practices. The ideal candidate will have a strong background in cybersecurity, excellent communication skills, and a proactive approach to fostering a culture of security within the organization.

They will assist the Security Awareness Manager by developing and executing security awareness campaigns and training programs tailored to various departments and roles within the hospital. They will foster a security-conscious culture by engaging employees at all levels and promoting the importance of cybersecurity in daily operations. Additionally, they will collaborate with hospital leaders and security teams to identify key areas of risk and design training programs to mitigate those risks while assisting in the development and enforcement of security policies and procedures.

Working with the Security Awareness Manager, the candidate will monitor and evaluate the effectiveness of security awareness programs through metrics and reporting, making data-driven recommendations for improvement. They will also create and distribute educational materials, including presentations, newsletters, videos, and e-learning modules, to promote security awareness.

Minimum Education

Bachelor's Degree Bachelor's degree in a computer science, math, engineering, or another relevant discipline or equivalent training and work experience (Required)

Minimum Work Experience

5 years 5 years of experience in cybersecurity with a focus on vulnerability management, cybersecurity operations, analysis, forensics and/or investigations (Required)

Required Skills/Knowledge

• Some experience in the application of key cybersecurity practices, controls, and frameworks

• Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills; and the ability to communicate information risk-related concepts to technical as well as nontechnical audiences

• Limited direct experience and knowledge of cybersecurity auditing, compliance, and policy

• Some experience in performing risk assessments, vulnerability management, penetration testing, and threat identification.

• Several years experience in the management of access controls including identity, active directory, privileged account management, and authentication

• Some experience in participating in cybersecurity incident response, risk remediation, business continuity, disaster recovery, and cyber operations.

Functional Accountabilities

Cybersecurity Analysis

• Initiates and manages tasks involved in the identification, documentation, and reporting of cyber risks

• Able to initiate and manage tasking for development and documentation of cybersecurity policies, standards, and procedures.

• Engages with other CNH business units to shape initiatives ensuring security of assets, applications, and data

• Initiates and manages tasks that develop and document procedures associated with managing access to CNH systems, data, and other assets

• Initiates and manages tasks associated with cybersecurity incidents, as required

Organizational Accountabilities

Organizational Accountabilities (Staff)

Organizational Commitment/Identification

• Anticipate and responds to customer needs; follows up until needs are met

Teamwork/Communication

• Demonstrate collaborative and respectful behavior

• Partner with all team members to achieve goals

• Receptive to others' ideas and opinions

Performance Improvement/Problem-solving

• Contribute to a positive work environment

• Demonstrate flexibility and willingness to change

• Identify opportunities to improve clinical and administrative processes

• Make appropriate decisions, using sound judgment

Cost Management/Financial Responsibility

• Use resources efficiently

• Search for less costly ways of doing things

Safety

• Speak up when team members appear to exhibit unsafe behavior or performance

• Continuously validate and verify information needed for decision making or documentation

• Stop in the face of uncertainty and takes time to resolve the situation

• Demonstrate accurate, clear and timely verbal and written communication

• Actively promote safety for patients, families, visitors and co-workers

• Attend carefully to important details - practicing Stop, Think, Act and Review in order to self-check behavior and performance