Manager – Cyber Communications & Security Awareness

Sentara Health•Norfolk, VA

7d•$116,730 - $216,778•Remote

About The Position

Sentara is hiring a Manager – Cyber Communications & Security Awareness. This position is fully remote. Occasional travel is required one to two times a year. The Manager – Cyber Communications & Security Awareness will serve as an integral team member helping drive cyber communications and education across the cyber portfolio in a manner that meets Sentara Health requirements. You will have responsibility for helping secure our workforce and driving a stronger security culture. Reporting directly to the Director – Cyber Execution & Operations, you will partner with Cyber Security leaders and team members to help them plan, craft, and distribute their cyber security communications. You will also have responsibility for maturing our existing security awareness and education program into a top-of-class program. This role involves exposure to all areas of our Cyber Security organization as well as regular interaction with various colleagues across Cyber, IT, and the business. People leadership experience required as you will have analysts reporting directly to you.

Requirements

Experienced, proactive, self-driven executor with the ability to work independently.
Strong analytical, problem-solving, and decision-making skills. Anticipates obstacles, develops plans to resolve them, and appropriately communicates. Experienced with effectively applying strategic thinking and visioning resulting in successful outcomes.
Organized and detail-oriented. Able to work well under deadlines in a changing environment.
Excellent interpersonal, written, and verbal communication skills.
Ability to express complex technical concepts in business terms.
Experienced working effectively in ambiguous situations and effectively determining the best path forward.
Able to translate data into meaningful insights and written summaries.
Excels at prioritization, presentation, and facilitation. Models related best practices.
Comfortable owning your space and establishing a sense of urgency in the fabric of what you do.
Ability to support business needs outside of standard business hours when needed. Ex. Emergency communications.
Experience administering and managing Microsoft SharePoint Online sites.
Strong Microsoft Word, PowerPoint, and Excel skills.
Cyber security work experience.
8+ years of relevant experience with a degree (Required) OR 10+ years of relevant experience without a degree (Required)
8 to 10+ years of relevant experience (Required)

Nice To Haves

Experience influencing cross-functional teams and initiatives.
Expects resistance to change and enjoys the challenge of mitigating it in positive ways.
Growth mindset. Change-oriented in both actions and words.
Experience successfully executing multiple simultaneous initiatives – both planned and ad hoc.
Proponent of people change management with experience incorporating it into your work.
Agile work experience.
Product methodology work experience.
Experience working in a highly regulated environment.
Healthcare experience.
Experience with various industry regulations and frameworks (PCI, HIPAA, Data Privacy Laws, ISO27001/2, NIST, HITRUST, etc.).

Responsibilities

Support the Cyber Security team with all necessary communications including but not limited to project communications, tool or process rollouts/updates, emergency cyber alerts, etc.
Develop and manage targeted and comprehensive communications plans: Guide identification of messaging needed, applicable stakeholders & audiences, and appropriate distribution channels. Drive creation of publication plan and timing.
Ensure proper editing and proofing is conducted resulting in consistently professional, easy-to-understand communications that adhere to style guide and branding requirements.
Track and adapt plans ensuring successful execution.
Act as Cyber point person for all emergency communications and ensure a process is documented and kept up to date with RACI for on and off hour needs including clearly defined escalation paths.
Act as primary point of contact between Cyber and Corporate Communications teams.
Oversee and mature our Cyber SharePoint Online site to become best in class while ensuring proper administration and upkeep.
Ensure all cyber communications support processes and how-tos are documented and kept up to date.
Mature the existing program. Build a yearly plan and have the team successfully execute against it.
Continuously work with our Cyber team to identify our top risks and the behaviors needed to change to mitigate those risks. Then, execute applicable awareness and education actions to drive necessary change.
Work with appropriate Cyber team members to identify different roles that require additional or specialized skills-based training to ensure colleagues are equipped to do their jobs safely and securely and ensure your team actions to support.
Continue to mature high-visibility phishing program and associated metrics.
Engage our workforce to enable them to exhibit behaviors and skills to make the most of our technology safely and securely.
Promote how people benefit from security as a foundational program principle.
Structure the program to be sustainable over the long-term, resulting in a positive security culture in alignment with our organization-wide cultural attributes.
Work to support a future state where people believe in, value, and prioritize cyber security.
Define and align analyst roles to efficiently and effectively support both spaces as they mature. Ensure cross-training where appropriate.
Actively build strong relationships across different business departments and stakeholders to ensure ongoing program understanding, support, and engagement.
Ensure programs evolve with changing company and security needs.
Create a means of tracking and reporting on program deliverables to easily provide and communicate status, wins, and lessons learned.
Build a metrics framework that will effectively measure and communicate impact of each program and report on up through executive leadership on an established cadence.
Ensure programs meet all industry security training regulations, standards, and compliance requirements.

Benefits

Medical, Dental, Vision plans
Adoption, Fertility and Surrogacy Reimbursement up to $10,000
Paid Time Off and Sick Leave
Paid Parental & Family Caregiver Leave
Emergency Backup Care
Long-Term, Short-Term Disability, and Critical Illness plans
Life Insurance
401k/403B with Employer Match
Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
Student Debt Pay Down – $10,000
Pet Insurance
Legal Resources Plan
Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.