Cybersecurity Awareness and Training Analyst

Children's National Medical Center - Silver Spring, MD

Full-time - Mid Level

Silver Spring, MD

Hospitals

About the position

Children's National Hospital is seeking a dynamic and experienced Mid-Level Security Awareness and Training Analyst to join our cybersecurity team. The ideal candidate will have a strong background in information security and a passion for educating and empowering employees to recognize and respond to security threats. This role involves developing, implementing, and managing security awareness programs that promote a culture of security within the organization. The Security Awareness and Training Analyst will assist the Security Awareness Manager in the development and execution of a comprehensive security awareness program and campaign aimed at educating employees about information security best practices, policies, and procedures. They will accomplish this by creating engaging and informative training materials, including presentations, videos, newsletters, and e-learning modules. Additionally, this person will conduct regular security awareness training sessions, workshops, and simulations, such as phishing exercises. Staying current with the latest security trends, threats, and technologies, and providing regular updates and guidance to employees while collaborating with cross-functional teams to integrate security awareness into organizational processes and projects is an integral part of this role. This ensures we maintain a culture of security within our hospital.

Responsibilities

• Develop and implement security awareness programs and campaigns.
• Create engaging training materials such as presentations, videos, newsletters, and e-learning modules.
• Conduct regular security awareness training sessions, workshops, and simulations, including phishing exercises.
• Stay current with the latest security trends, threats, and technologies.
• Provide regular updates and guidance to employees regarding security best practices.
• Collaborate with cross-functional teams to integrate security awareness into organizational processes and projects.
• Document procedures associated with managing access to CNH systems, data, and other assets.
• Engage with other CNH business units to ensure the security of assets, applications, and data.

Requirements

• Bachelor's degree in computer science, math, engineering, or a relevant discipline or equivalent training and work experience.
• 3 years of experience in cybersecurity with a focus on vulnerability management, cybersecurity operations, analysis, forensics, and/or investigations.
• Demonstrated ability to apply key cybersecurity practices, controls, and frameworks.
• Excellent written and verbal communication and presentation skills.
• Interpersonal and collaborative skills to communicate risk-related concepts to technical and non-technical audiences.
• Understanding of cybersecurity auditing, compliance, and policy practices.
• Knowledge of risk assessment, vulnerability management, penetration testing, and threat identification practices.
• Familiarity with access management, active directory, privileged account management, and authentication controls.
• Understanding of incident response, risk remediation, business continuity, disaster recovery, and cyber operations.