Associate Director, Security Awareness

Fitch Group • New York, NY

1d • Hybrid

About The Position

Fitch Group is currently seeking an Associate Director of Security Awareness based out of our New York office.

This position is part of the Information Security team, reporting directly to the head of Information Security Strategy & Programs. Information Security is responsible for enabling the firm to deliver against its strategic goals by reducing the risk of significant security incidents and data breaches

Requirements

• 5+ years of experience in cybersecurity awareness, training, risk management, or a related field.
• Strong understanding of cybersecurity principles and human factors in security.
• Excellent communication, presentation and writing skills.
• Ability to create engaging and effective training materials.
• Strong analytical skills to assess program effectiveness.
• Strong creativity and innovative thinking abilities
• Proactive and able to work independently and as part of a team.
• Strong interpersonal skills and the ability to influence and engage stakeholders at all levels.
• Prior experience developing training materials/courses
• Prior experience running security awareness programs
• Working knowledge of AI-enabled productivity tools; ability to craft effective prompts and validate outputs.

Nice To Haves

• Relevant certifications (e.g., CISSP, CISM, CISA) or any Degree in Cyber Security
• Proficiency in using e-learning platforms and other training tools
• Knowledge of MS Excel, MS Power Point, JIRA , SharePoint and Confluence
• Highly organized with strong project management skills
• Demonstrated thought leadership through cybersecurity publications
• Prior experience creating and/or managing security awareness programs
• Prior experience designing and executing phishing campaigns using tools like ProofPoint, KnowB4 etc.
• Prior experience with security champion/advocate programs

Responsibilities

• Security Awareness Training and Education: Design and deliver engaging training sessions, workshops, and e-learning modules to educate employees on best practices for cybersecurity. This includes new hire, annual, and ad-hoc trainings.
• Develop and Implement Role-Based Awareness Training: Create and execute role-based cybersecurity awareness trainings tailored to various departments and roles within the organization
• Execute National Cybersecurity Awareness Month Activities: Plan and implement activities and communication for the organization as part of National Cybersecurity Awareness Month. This includes interactive activities, informational articles and other communications.
• Execute Phishing Testing Program: Advance and execute firmwide and group-based phishing campaigns to educate and empower users to identify and report phishing emails. Manage repeat clicker education program to help further educate users and enhance resiliency.
• Communication Strategy: Develop effective communication strategies in collaboration with Employee Communications to promote cybersecurity awareness and ensure consistent messaging across the organization. Publish monthly cybersecurity newsletter to raise awareness and promote cybersecurity. Utilize and regularly update intranet sites for effective communication across organization.
• Metrics and Reporting: Establish metrics to measure the effectiveness of awareness programs and provide regular reports to senior management.
• Policy Development: Participate in the creation and revision of security awareness cybersecurity policies and procedures, ensuring they align with awareness initiatives.
• Business Engagement: Work closely with various business units to ensure alignment and support for awareness activities.
• Employee Engagement and Culture Building: Foster a culture of cybersecurity awareness and responsibility across the organization. Encourage employee participation in awareness activities and recognize their contributions to improving cybersecurity.
• Continuous Improvement: Stay current with the latest trends and best practices in cybersecurity awareness and incorporate them into the program.

Benefits

• Hybrid Work Environment: On-site presence required two days per week.
• A Culture of Learning & Mobility: Access to dedicated training, leadership development, and mentorship programs to support continuous learning.
• Investing in Your Future: Retirement planning and tuition reimbursement programs to help you meet your short- and long-term goals.
• Promoting Health & Wellbeing: Comprehensive healthcare offerings that support physical, mental, financial, social, and occupational wellbeing.
• Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance work and family life.
• Inclusive Work Environment: A collaborative workplace where all voices are valued, supported by Employee Resource Groups that unite and empower colleagues worldwide.
• Dedication to Giving Back: Paid volunteer days, matched donation programs, and ample opportunities to volunteer in your community.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed