Senior Analyst, Information Security Awareness and EducationThe Senior Analyst will support the delivery, operation, and continuous improvement of Four Seasons' enterprise Cybersecurity Awareness program. The Senior Analyst will work closely with the Security Awareness Manager to execute program initiatives, with a particular focus on phishing simulations, training and education, communications, reporting, and program measurement.
The successful candidate will be an organized, analytical, and creative communicator who is comfortable working with data and collaborating with stakeholders across a global organization.
What You'll Be Doing:Security Awareness
- Support the delivery and continuous improvement of the enterprise IT Security Awareness and Education program.
- Coordinate and execute the day-to-day activities of the phishing simulation program, including campaign development, testing, deployment, monitoring, follow-up, and reporting.
- Support the continued maturity of the phishing program by implementing enhancements, targeted education, and other initiatives established through the Security Awareness strategy.
- Analyze phishing simulation, training, and awareness data to identify trends, behaviours, and opportunities for improvement.
- Develop and maintain security awareness materials, including learning courses, communications, presentations, phishing education, and other resources.
- Support the delivery and administration of annual, targeted, and role-based Security Awareness training.
- Coordinate security awareness campaigns, events, and employee engagement activities.
- Support timely awareness and education activities in response to emerging cybersecurity threats and organizational needs.
- Collaborate with internal teams to support a comprehensive and cohesive Security Awareness program.
- Stay current with emerging cybersecurity threats, security awareness practices, technologies, and industry trends.
What You Bring:- 1-3 years of experience supporting security awareness, cybersecurity, training and education, communications, data analytics, or related programs.
- Experience coordinating or supporting phishing simulation and security awareness programs is preferred.
- Experience working with data, analytics, reporting, or data-driven programs is strongly preferred.
- Strong analytical skills with the ability to identify trends and translate data into meaningful insights.
- Excellent communication skills, both verbal and written.
- Strong attention to detail and organizational skills.
- Ability to manage multiple activities and priorities simultaneously.
- Ability to work collaboratively with stakeholders across the organization.
- Experience with security awareness platforms, learning management systems, reporting tools, or data visualization tools is an asset.
- Education or experience in cybersecurity, information technology, data analytics, communications, education, or a related field is preferred.
- Security+, CSAP, SSAP, or other cybersecurity/security awareness certifications are considered an asset.
- Understanding of cybersecurity principles, common threats, vulnerabilities, and attack techniques.
- Strong understanding of phishing and social engineering techniques.
- Familiarity with security awareness and phishing simulation tools and technologies.
- Strong data analysis and reporting skills; experience with Excel and data visualization tools such as Power BI is preferred.
- Familiarity with information security frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, and PCI DSS.
- Understanding of security incident reporting and response.
- Ability to clearly communicate with technical and non-technical stakeholders.
Key Skills:- Detail-oriented, highly organized, and effective at prioritization and time management.
- Analytical and curious, with an interest in using data to understand employee behaviours and improve program outcomes.
- Creative mindset with an ability to contribute fresh ideas for engaging and effective security awareness activities.
- Collaborative attitude and ability to work effectively with teams across the organization.
- Ability to communicate cybersecurity concepts clearly to technical and non-technical audiences.
- Ability to understand employee perspectives and consider the employee experience when delivering awareness initiatives.
- Proactive and comfortable working within an evolving Security Awareness program.
- Demonstrates integrity and ethical behaviour in accordance with the company's values and expectations.
- Coordinate and execute phishing simulations and associated education and follow-up activities.
- Measure the effectiveness of phishing simulations, phishing reporting, training, and other awareness initiatives.
- Analyze Security Awareness data and develop reporting to identify trends, behaviours, and areas of risk.
- Support the implementation of improvements to mature the phishing and broader Security Awareness program.
- Support the administration and completion of annual and targeted Security Awareness training.
- Develop engaging awareness communications, educational materials, and employee resources.
- Support awareness campaigns and initiatives across different employee populations, departments, regions, and roles.
- Maintain program documentation, reporting, training records, and awareness resources.
- Support the Security Awareness Manager with program initiatives, projects, and continuous improvement activities.
Salary Range: $70,000 - $95,000 CAD
This role will be a Hybrid working model, which will require 3 days per week in the Four Seasons Corporate Office located at 20 York Mills Road, Toronto, Ontario #LI-Hybrid
