Cyber Awareness Specialist

Job Title: Cyber Awareness Specialist

Location: Toronto, ON (Hybrid)
    
Estimated Duration: 6 months

To support the execution of the Cyber security division mandate, cyber vision and strategy, providing technical and business advice, support and services to all divisions, agencies and corporations of the client. 

To own the development and execution of the cyber awareness and training program and all associated campaigns and programs that may spin off from them.

To define, develop and support cyber awareness and training programs and initiatives, engaging with teams across the organization to build alignment on key projects and develop execution roadmaps. 

Assignment Duties

• Identify and quantify gaps in cyber security awareness and the related risks. To understand those risks and enlist executive support to address them. 
• Develop, collect and translate cyber security metrics into a form of reporting that is relevant and understandable to a senior audience and aligns with and supports the assessment of cyber awareness performance and ultimately business risk. 
• Responsible to help describe and translate cyber risks that other lines of business understand. Apply cyber awareness and analytical frameworks (e.g. NIST CSF).
• Develop and implement detailed cyber awareness and training plans and recommend cyber security policies/procedures regarding program specific requirements. 
• Provide subject matter expertise and senior level strategic advice on cyber awareness and security issues affecting the organization, identifying potential exposures, and conducting reviews to ensure that undesirable effects are detected, mitigated and/or corrected. 
• Communicate cyber security awareness, related risks, metrics and reporting to stakeholders, clients, project managers, and team. 
• Maintain accurate reporting of key cyber awareness metrics and associated data and analytics. 
• Build and maintain strong relationships with internal and external stakeholders. Establish relationships with strategic partners, collaborating on the advancement of cyber awareness and training programs. 
• Maintain an up-to-date and in-depth knowledge of cyber security, emerging threats, trends, and associated techniques and technologies. 

Experience and Qualifications

1. Post-secondary degree in Business or Technology or a related discipline. 
2. Extensive experience in Cyber Security, Information Security and awareness and training program delivery. 
3. Strong understanding of project management techniques and methods. 
4. Extensive experience in developing metrics ( KRIs, KPIs) 
5. Experience in Instructional Design, Development and Delivery on Technology-Based Learning is desirable. 
6. Experience with Learning Management Systems (LMS) and Learning Content Management Systems (LCMS) such as Terranova is desirable. 
7. Experience using Cornerstone Enterprise Learning Management System is desirable. 
8. Experience with management and working with SCORM files and the Learning Management System is desirable. 
9. Preferred Certifications (any in the list):  CISSP, CRISC, CISM, ISO 27001 
10. Certification in Training and a? Learning Consultant is desirable.
11. Experience in developing and executing phishing campaigns including: phishing email template design for varying complexity of content; familiarity with industry benchmarks for purposes of reporting click rates, repeat offenders as an example; experience with developing reporting dashboard for analytics on KPIs, KRIs and other indicators.