Information Security Ops - Manager, Human Risk Management

American National Insurance • Springfield, MO

81d

About The Position

This position is dedicated to the understanding, measuring, and mitigation of the information security risks associated with human behavior within the organization. It seeks to cultivate a culture which embraces cybersecurity principles and consistently incorporates them into daily functions at all levels of the enterprise. A person in this position manages the Human Risk Management team and program, providing guidance, mentorship, and oversight. The ideal candidate will have a proven track record of effectively translating complex technical subject matter into real world, easy to understand verbal and written content tailored to the intended audience, acting as a catalyst for positive behavior change, and strategic leadership experience.

Requirements

• Bachelor's degree.
• 10 to 12 years of experience.
• Two to five years of supervisory/management experience.
• Ten or more years of applicable experience may be considered in lieu of a bachelor’s degree.
• Eight or more years of experience with corporate communication or education efforts: proven presentation and communication skills, to include verbal, visual, and written.
• General knowledge of insurance concepts.
• Demonstrated knowledge of cybersecurity concepts.
• Six to eight years of experience working with creative suite software and MS office tools.
• Familiarity with using virtual rewards programs, gamification technology, or social media to increase awareness and integration of awareness principles.
• Mental agility, attention to detail, creativity, and innovative thinking.
• Demonstrated project or task management skills.
• Demonstrated ability to plan and facilitate both in person and remote meetings effectively, and efficiently.
• Possess an understanding of the concepts of confidentiality, integrity, and prioritization strategy.

Nice To Haves

• SSAP, CISSP, CompTIA Security+, and other certifications are desirable.

Responsibilities

• Develops strategy for management of the team’s human risk management efforts, cybersecurity ambassador program, awareness training, simulated phishing campaigns, required annual and role-specific training, training presentations, and intranet, security alert, and communications content creation.
• Acts as a trainer, mentor, and coach to team members. Manages the team’s administrative functions and performance reviews.
• Provides oversight, ensuring program workflows and procedures are followed with adherence to defined service expectations and deliverable deadlines.
• Oversees maintenance, development and expansion of program playbook, process documentation, and training resources.
• Develops, manages, and improves metrics, reporting, and delivery strategy for the Human Risk Management Program and for the Information Security Organization overall.
• Oversees applicable external and internal audits, regulatory responses, data and records retention practices.
• Responsible for enforcing the enterprise’s controls for the systems the team administers.
• Provides guidance on matters of strategic content and training delivery and audience engagement.
• Maintains oversight and provides guidance for collaborative work with other business areas and teams on Human Risk Management projects and continued program development.
• Acts as a liaison and ambassador for the team with other business areas, educating others on general human risk and information security concepts, seeking buy-in where needed.

Benefits

• Medical, dental, vision, and basic life insurance.
• 401k plan.
• Annually a bank of paid time off and paid holidays.
• Support for an inclusive work environment, including an emphasis on a healthy work-life balance, development opportunities, and a casual dress code.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees