Human Risk Manager / Cybersecurity Awareness Professional SME
Job Description
Company: Diligent Solutions, LLC
Location: Washington, US
Diligent Solutions, LLC is hiring a Human Risk Manager / Cybersecurity Awareness Professional SME to lead the cybersecurity awareness and human-risk program for a federal civilian agency. The role involves designing and delivering training, managing phishing and social-engineering exercises, measuring program effectiveness, and supervising an awareness specialist.
Responsibilities
• Assess, design and build training scenarios, approaches, objectives, plans, tools, job aids and curricula
• Develop and revise training courses
• Train staff through formal classroom courses, workshops and seminars, in person when the customer asks
• Run the customer’s awareness and training program, which covers role-based training, annual awareness training, phishing and other social engineering training, and ad hoc training
• Track, analyze and trend completion of every type of training, and report on it
• Run monthly and ad hoc phishing and social engineering exercises, then build and analyze the reports
• Run monthly and ad hoc cybersecurity lunch & learns, and report on attendance and feedback
• Review the training program for gaps and recommend fixes
• Run an annual gap analysis of the awareness program and report on its maturity
• Administer the KnowBe4 platform: campaigns, phish-prone metrics, training assignments and reports
• Align training with FISMA, NIST SP 800-50 and SP 800-16, and customer requirements
• Build targeted training from incident, vulnerability and POA&M trends, and give extra training to repeat clickers and high-risk roles such as executives, privileged users and OT/manufacturing staff
• Supervise and mentor the Awareness Journeyman
Skills
• Bachelor’s degree in computer science, business or IT
• 8+ years leading a security awareness training program, not only delivering training
• Experience designing curricula and teaching classroom courses, workshops and seminars
• Has run phishing or social engineering simulation programs and reported their metrics
• Information security training experience under FISMA and the NIST SP 800 series
• U.S. citizen
• KnowBe4 administration
• Experience with a federal role-based training program
• Behavior-change measurement: phish-prone trends, reporting rates, risk scoring
• Has trained staff in a manufacturing, OT or industrial environment
• Instructional design tools and LMS administration
• SANS Security Awareness Professional, CompTIA Security+, CISSP or a similar certification
• Active Tier 5 or Top Secret investigation
Company Overview
• Diligent Solutions is dedicated to empowering your business success through a unique, integrated approach that emphasizes people, process, and technology. It was founded in 2017, and is headquartered in National Harbor, Maryland, US, with a workforce of 11-50 employees. Its website is https://diligentsolutions.com.
Source: Jobright
