Manager – Cyber Communications & Security Awareness

City/State

Work Shift

Overview:

This position is fully remote.

Occasional travel is required one to two times a year.

Role Summary

The Manager Cyber Communications & Security Awareness will serve as an integral team member helping drive cyber communications and education across the cyber portfolio in a manner that meets Sentara Health requirements. You will have responsibility for helping secure our workforce and driving a stronger security culture. Reporting directly to the Director Cyber Execution & Operations you will partner with Cyber Security leaders and team members to help them plan craft and distribute their cyber security communications. You will also have responsibility for maturing our existing security awareness and education program into a top-of-class program. This role involves exposure to all areas of our Cyber Security organization as well as regular interaction with various colleagues across Cyber IT and the business. People leadership experience required as you will have analysts reporting directly to you.

Responsibilities

As a proven executor who enjoys developing new and innovative ways to approach human risk behavior change and communication you will ensure ongoing operationalization and maturation of both our cyber communications support and security awareness and education programs. You thrive on developing and implementing consistent messaging that is appropriately branded helping others become better communicators and developing tools and templates to help team members stay organized and on track. Focusing on people and mitigating human risk is interwoven in all that you do. You are comfortable and experienced in using action and persuasion to drive collaboration accountability and on-time delivery.

Cyber Communication Support

As direct manager of the team responsible for helping Cyber Security colleagues plan and create communications you will ensure you and/or your team will:

• Support the Cyber Security team with all necessary communications including but not limited to project communications tool or process rollouts/updates emergency cyber alerts etc.
• Develop and manage targeted and comprehensive communications plans: Guide identification of messaging needed applicable stakeholders & audiences and appropriate distribution channels. Drive creation of publication plan and timing.
• Ensure proper editing and proofing is conducted resulting in consistently professional easy-to-understand communications that adhere to style guide and branding requirements.
• Track and adapt plans ensuring successful execution.
• Act as Cyber point person for all emergency communications and ensure a process is documented and kept up to date with RACI for on and off hour needs including clearly defined escalation paths.
• Act as primary point of contact between Cyber and Corporate Communications teams.
• Oversee and mature our Cyber SharePoint Online site to become best in class while ensuring proper administration and upkeep.
• Ensure all cyber communications support processes and how-tos are documented and kept up to date.

Cyber Security Awareness & Education

As direct manager of the team responsible for developing and executing the Cyber Security Awareness & Education program you will ensure you and/or your team will:

• Mature the existing program. Build a yearly plan and have the team successfully execute against it.
• Continuously work with our Cyber team to identify our top risks and the behaviors needed to change to mitigate those risks. Then execute applicable awareness and education actions to drive necessary change.
• Work with appropriate Cyber team members to identify different roles that require additional or specialized skills-based training to ensure colleagues are equipped to do their jobs safely and securely and ensure your team actions to support.
• Continue to mature high-visibility phishing program and associated metrics.
• Engage our workforce to enable them to exhibit behaviors and skills to make the most of our technology safely and securely.
• Promote how people benefit from security as a foundational program principle.
• Structure the program to be sustainable over the long-term resulting in a positive security culture in alignment with our organization-wide cultural attributes.
• Work to support a future state where people believe in value and prioritize cyber security.

Overarching Team and Program Management

• Define and align analyst roles to efficiently and effectively support both spaces as they mature. Ensure cross-training where appropriate.

• Actively build strong relationships across different business departments and stakeholders to ensure ongoing program understanding support and engagement.
• Ensure programs evolve with changing company and security needs.
• Create a means of tracking and reporting on program deliverables to easily provide and communicate status wins and lessons learned.
• Build a metrics framework that will effectively measure and communicate impact of each program and report on up through executive leadership on an established cadence.
• Ensure programs meet all industry security training regulations standards and compliance requirements.

Requirements

• Experienced proactive self-driven executor with the ability to work independently.
• Strong analytical problem-solving and decision-making skills. Anticipates obstacles develops plans to resolve them and appropriately communicates. Experienced with effectively applying strategic thinking and visioning resulting in successful outcomes.
• Organized and detail-oriented. Able to work well under deadlines in a changing environment.
• Excellent interpersonal written and verbal communication skills.
• Ability to express complex technical concepts in business terms.
• Experienced working effectively in ambiguous situations and effectively determining the best path forward.
• Able to translate data into meaningful insights and written summaries.
• Excels at prioritization presentation and facilitation. Models related best practices.
• Comfortable owning your space and establishing a sense of urgency in the fabric of what you do.
• Ability to support business needs outside of standard business hours when needed. Ex. Emergency communications.
• Experience administering and managing Microsoft SharePoint Online sites.
• Strong Microsoft Word PowerPoint and Excel skills.
• Cyber security work experience.

Desired Characteristics

• Experience influencing cross-functional teams and initiatives.
• Expects resistance to change and enjoys the challenge of mitigating it in positive ways.
• Growth mindset. Change-oriented in both actions and words.
• Experience successfully executing multiple simultaneous initiatives both planned and ad hoc.
• Proponent of people change management with experience incorporating it into your work.
• Agile work experience.
• Product methodology work experience.
• Experience working in a highly regulated environment.
• Healthcare experience.
• Experience with various industry regulations and frameworks (PCI HIPAA Data Privacy Laws ISO27001/2 NIST HITRUST etc.).

• 8 years of relevant experience with a degree (Required)

OR

• 10 years of relevant experience without a degree (Required)

• Experience in lieu of a Bachelors Degree

• No specific certification or licensure requirements

• 8 to 10 years of relevant experience (Required)

We provide market-competitive compensation packages inclusive of base pay incentives and benefits. The base pay rate for Full Time employment is: $116729.60 - $216777.60. Additional compensation may be available for this role such as shift differentials standby/on-call overtime premiums extra shift incentives or bonus opportunities.

Talroo Talroo-IT #LI-DS1 #Indeed

Keywords: cyber communications security awareness PCI HIPAA Data Privacy Laws ISO27001/2 NIST HITRUST people management leadership RACI

Benefits: Caring For Your Family and Your Career

Medical Dental Vision plans

Adoption Fertility and Surrogacy Reimbursement up to $10000

Paid Time Off and Sick Leave

Paid Parental & Family Caregiver Leave

Emergency Backup Care

Long-Term Short-Term Disability and Critical Illness plans

Life Insurance

401k/403B with Employer Match

Tuition Assistance $5250/year and discounted educational opportunities through Guild Education

Student Debt Pay Down $10000

Pet Insurance
Legal Resources Plan
Colleagues have the opportunity to earn an annual discretionary bonus ifestablished system and employee eligibility criteria is met.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30000-member workforce. Diversity inclusion and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.

In support of our mission to improve health every day this is a tobacco-free environment.

For positions that are available as remote work Sentara Health employs associates in the following states:

Alabama Delaware Florida Georgia Idaho Indiana Kansas Louisiana Maine Maryland Minnesota Nebraska Nevada New Hampshire North Carolina North Dakota Ohio Oklahoma Pennsylvania South Carolina South Dakota Tennessee Texas Utah Virginia Washington West Virginia Wisconsin and Wyoming.