Information Security Analyst United States, San Diego, CA

Tbwa Chiat/Day - San Diego, CA

Full-time

San Diego, CA

About the position

The Security Awareness Analyst at PlayStation will develop, build, and deliver a comprehensive Security Awareness Program aimed at enhancing cybersecurity awareness among employees globally. This role involves program development, operational management, and project management to ensure compliance with industry standards and to foster a culture of security within the organization.

Responsibilities

• Contribute and support an engaging Security Awareness Program that influences attitudes and changes behaviors.
• Ensure the Program meets Sony Group compliance requirements and relevant industry regulations and standards.
• Socialize the Program to other teams and promote its adoption, considering different cultures, nationalities, and languages.
• Solicit feedback from colleagues and partners to identify gaps and opportunities to evolve the Program.
• Continuously evaluate and manage Program vendors and services.
• Analyze metrics, derive insights, and prepare consolidated reporting illustrating the impact of the Program effectiveness.
• Acquire and curate content for the Program.
• Regularly deliver cyber security training globally.
• Regularly deliver simulated phishing emails globally.
• Oversee the delivery of training and phishing in business units outside the Program.
• Troubleshoot user issues and liaise with internal stakeholders and external vendors to resolve them.
• Administrate SaaS services used to deliver training and simulated phishing emails.
• Regularly prepare and send reports to management.
• Create engaging content to ensure that the Program message is heard and applied in diverse and original forms.
• Publish content to Intranets.
• Coordinate the delivery of security advisories and urgent communications to a global employee audience.
• Organize and host events through various mediums.
• Conduct security awareness assessments and surveys to gauge employee knowledge and behavior.
• Monitor the Program mailbox and respond to queries from employees.
• Provide support and guidance to employees on security-related issues and best practices.
• Stay current on the latest cybersecurity threats and trends to update training content accordingly.
• Assist in the development and enforcement of security policies and procedures.
• Plan and deliver engaging activities for Cyber Security Month in October.
• Introduce new Program improvements and assess the feasibility of new opportunities.
• Develop a plan that explains objectives, benefits, design, implementation tasks, timings, operational roles and responsibilities, communications, training, and support.
• Influence stakeholders to get their support and collaborate with subject matter experts.
• Motivate contributors to complete tasks against agreed milestones and prepare regular status reports on progress.
• Develop performance indicators and measure the impact.
• Prioritize and balance multiple projects simultaneously.

Requirements

• Minimum 2 years of cybersecurity experience.
• A bachelor's degree in cybersecurity, marketing, education, or a related field.
• Experience speaking publicly to large audiences at workshops/events/seminars either as trainer or an authority on the presentation material.
• Strong communication and presentation skills, knowledge of cybersecurity principles, and the ability to create engaging training content.
• Attentive, organized and good attention to detail.
• Quick learner with the ability to multi-task.
• Proactive and self-motivated, yet capable of forming a team as needed.
• Ability to take complex topics and form simple and concise messaging.
• Professional writer, able to research and prepare timely, high quality, clearly written materials free of grammatical errors and spelling mistakes.
• Good knowledge of Office 365.

Nice-to-haves

• CISSP, CISM or ISO/IEC 27001 Lead Implementer an advantage.