Senior Security Awareness Analyst

Overview

Senior Security Awareness Analyst on FNZ's Group Cyber & Information Security team, responsible for strengthening a positive security culture across the business through awareness programs, behavioral change and human risk management.

What you'll do

• Design, develop and implement engaging security awareness and training programs tailored to different employee groups.
• Analyze and assess employee security behaviors, identify areas for improvement and implement targeted interventions and nudges to reduce human risk.
• Collaborate with key stakeholders across FNZ to integrate security into the business's core values and work culture, ensuring security is seen as everyone's responsibility.
• Develop and track key human risk performance indicators to measure the success and impact of security culture initiatives.
• Provide regular reports and presentations to key stakeholders.
• Create and distribute internal communications such as newsletters, articles, infographics and webinars to maintain high levels of engagement and awareness across FNZ.
• Manage the phishing simulation program, including developing new exercises, analyzing trends and reporting.
• Work closely with the Cyber Resiliency team, including the SOC and Threat Intelligence, to communicate incident lessons learnt that mitigate and manage human risks moving forward.
• Support the internal CISO culture program with management of key communications across the team.

What you'll need

• Bachelor's degree in Information Security, Behavioral Science, Risk Management, Communications, or in a relevant related field (or equivalent work experience).
• Minimum of 5 years' experience in cybersecurity, security awareness, human risk management (or relevant related fields).
• Strong understanding of cybersecurity principles, common threats, human risk management and best practices.
• Excellent communication and presentation skills, with the ability to engage and influence individuals at all levels.
• Strong project management skills with the ability to manage multiple initiatives simultaneously.
• Ability to analyze data, interpret key metrics and report insights.

Nice to have

• Familiarity with security frameworks such as NIST and ISO.
• Experience with phishing simulations, gamified learning and other innovative approaches to security training.
• Experience in organizational change management and development.
• Experience in fostering a positive, proactive security culture within a global and diverse organization.

Details

• Location: Gurugram, India.
• Working in a flexible and agile way that meets the needs of the business and personal circumstances.