Cybersecurity Awareness Associate

Sandwich, Kent
Pfizer

The Cybersecurity Awareness Associate is responsible for obtaining the security awareness requirements and needs of Pfizer’s research and product development divisions. The candidate will deliver the information security awareness and education programs globally, and work with colleagues to ensure a measurable understanding of cybersecurity and handling sensitive information content.

The overall goal of the security awareness and education program is to reduce information security risk by ensuring that all colleagues and leadership understand security risks and policies and apply good information security practices with respect to Pfizer data and information technology systems.

In collaboration with other members of the Global Information Security department, this position will manage a broad set of activities, including: drafting publications, contributing to website content, facilitating marketing campaigns, scheduling meetings, creating timelines and infographics; and helping to plan and deliver outreach, awareness, and educational events. The Cybersecurity Awareness Associate will also be responsible for evaluating effectiveness of techniques and resources as appropriate.

ROLE RESPONSIBILITIES

Support information security training, education, and awareness programs across Pfizer.

• Assist, deliver, and support a mandatory corporate training program that educates colleagues on policies and best practices ensuring that the program is intuitive to use, provides engaging activities to reinforce behaviours, and serves as a repository for security guidance and references.
• Assist and contribute to content using the agreed upon delivery channels for the priority topics that have been established by Management and the ISAR team.
• Coordinate efforts with ISAR and other GIS peers, Information Security Officers, Client Partners, Divisional Information Security Officers and Public Affairs/Communications/Public Information Officers to develop strategies and maintain consistent messaging across the company.
• Build awareness by taking a holistic approach to the information security awareness program using electronic messages, forums, billboards, newsletters, symposia, and printed materials that complement each other and build upon previously covered concepts.
• Accommodate multiple learning styles into course design such as appropriate gamification, adult learning methodologies, social learning experiences, and other techniques to captivate audiences
• Define achievable, observable, and measurable learning objectives (skills) into training programs and evaluate the effectiveness of information security training, education, and awareness program/activities by creating a metrics framework that can effectively measure engagement, behaviors, and impact.
• Provide concise and accurate communications (both verbal and written) in produced awareness materials
• Demonstrated ability to work in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach

QUALIFICATIONS

• Required: Bachelor’s degree in Marketing, Business Administration, Communications, Education, Computer Science, or Cyber Security
• Showcase some years of professional experience in a corporate environment supporting Communications, Education, Computer Science, Cyber Security , or related function.
• Applies knowledge of information security and risk mitigation principles, theories, and techniques in daily work.
• Knowledge of manufacturing operations and risks specifically facing the WRDM and GPD divisions.
• Demonstrates understanding and use of project management methodologies, including the ability to plan, manage and maintain a complex, organization wide program over the longer term.
• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel.
• Strong public speaker.
• Independently writes well- structured and persuasive end products.
• Ability to communicate in a simple, clear and concise manner to the various communities within our organization.
• Practical knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behaviour necessary to reduce the ‘human factors’ risk.
• Desire to learn and integrate new capabilities in digital technology, such as audio, video, social media, online communities, blogs, and other web-based technologies.
• Creative thinking and understanding of audience to produce engaging materials in a variety of formats and media, including storyboards, user guides, and gamification elements.
• Confidently develops and delivers presentations and can respond to questions.
• Highly organized and able to multi-task and manage concurrent deadlines.
• Ability to effectively contribute to and lead working groups.
• A high degree of independence, integrity and confidentiality.
• Flexible; able to move strategy forward in a rapidly changing environment.

PREFERRED QUALIFICATIONS

• Security certification (CISSP, CISM, Sans Training and Certification, etc)
• Experience operating in an Agile setting.

PHYSICAL/MENTAL REQUIREMENTS

• Ability to operate comfortably in situation with high levels of uncertainty and ambiguity where others will frequently demand certainty and clarity
• No physical requirements

Work Location Assignment: Sandwich, with flexible options