Human Risk Manager / Cybersecurity Awareness Professional SME

Assurit; Fairfax (VA); Vor Ort; USD 120.000 - 150.000; Vollzeit

Benefits dieser Stelle

Medical and dental coverage

Paid time off

Zusammenfassung

Assurit is seeking a Human Risk Manager / Cybersecurity Awareness SME to lead the federal civilian agency's awareness program on site in the Washington, DC area, with base in Fairfax, VA. You will design curricula, run phishing exercises, and mentor the Awareness Journeyman while measuring behavior change.

The role requires 8+ years building security awareness programs, strong curriculum design skills, and US citizenship with ability to pass a High Risk background check; on-site work during core

Qualifikationen

• Bachelor's degree in computer science, business or IT.
• 8+ years leading a security awareness training program; not only delivering training.
• Experience designing curricula and teaching classroom courses, workshops and seminars.
• Has run phishing or social engineering simulation programs and reported their metrics.
• Information security training experience under FISMA and the NIST SP 800 series.
• U.S. citizen, able to pass a High Risk background investigation.
• Able to work on site in Washington, DC during core hours, 8:00 AM-4:00 PM.

Aufgaben

• Assess, design and build training scenarios, curricula and job aids.
• Develop and revise training courses; train staff in person when required.
• Run phishing and social engineering exercises and analyze the reports.
• Administer KnowBe4 campaigns, metrics and training assignments.
• Align training with FISMA and NIST SP 800-series requirements.
• Supervise the Awareness Journeyman and mentor staff.

Kenntnisse

Curriculum design

Security awareness leadership

Phishing simulations

FISMA/NIST SP 800 knowledge

Public speaking/training

Team mentorship

On-site collaboration

Ausbildung

Bachelor's degree

Tools

KnowBe4

LMS administration

Instructional design tools

Jobbeschreibung

Human Risk Manager / Cybersecurity Awareness Professional SME

On site, Washington, DC

About the Role

You will lead the cybersecurity awareness and human-risk program for a federal civilian agency. You will design the curriculum, run monthly phishing exercises and lunch & learns, teach in person, and measure whether behavior actually changes. You will lead one awareness specialist.

Key Responsibilities

• Assess, design and build training scenarios, approaches, objectives, plans, tools, job aids and curricula.
• Develop and revise training courses.
• Train staff through formal classroom courses, workshops and seminars, in person when the customer asks.
• Run the customer’s awareness and training program, which covers role-based training, annual awareness training, phishing and other social engineering training, and ad hoc training.
• Track, analyze and trend completion of every type of training, and report on it.
• Run monthly and ad hoc phishing and social engineering exercises, then build and analyze the reports.
• Run monthly and ad hoc cybersecurity lunch & learns, and report on attendance and feedback.
• Review the training program for gaps and recommend fixes.
• Run an annual gap analysis of the awareness program and report on its maturity.
• Administer the KnowBe4 platform: campaigns, phish-prone metrics, training assignments and reports.
• Align training with FISMA, NIST SP 800-50 and SP 800-16, and customer requirements.
• Build targeted training from incident, vulnerability and POA&M trends, and give extra training to repeat clickers and high-risk roles such as executives, privileged users and OT/manufacturing staff.
• Supervise and mentor the Awareness Journeyman.

Required Qualifications

• Bachelor's degree in computer science, business or IT
• 8+ years leading a security awareness training program, not only delivering training
• Experience designing curricula and teaching classroom courses, workshops and seminars
• Has run phishing or social engineering simulation programs and reported their metrics
• Information security training experience under FISMA and the NIST SP 800 series
• U.S. citizen, able to pass a High Risk background investigation
• Able to work on site in Washington, DC during core hours, 8:00 AM-4:00 PM
• Requires no certification for this role.

Preferred Qualifications

• KnowBe4 administration
• SANS Security Awareness Professional, CompTIA Security+, CISSP or a similar certification
• Experience with a federal role-based training program
• Behavior-change measurement: phish-prone trends, reporting rates, risk scoring
• Has trained staff in a manufacturing, OT or industrial environment
• Instructional design tools and LMS administration
• Active Tier 5 or Top Secret investigation

Compensation and Benefits

Assurit is an award winning, certified small business headquartered in Fairfax, VA. We offer a highly competitive compensation and benefits package inclusive of medical and dental coverage, as well as paid time off.

About the Company

Founded in 2013, Assurit has become a trusted provider of cybersecurity expertise to customers across federal, state and local governments, as well as the commercial sector. We are an employee-centric organization that focuses on the growth and development of our greatest asset - our people. We believe that if our Team is trained and educated, we will always be able to deliver our promise of customer success. If you enjoy work environments focused on continuous learning and growth, Assurit will be a great fit for you.

Equal Opportunity Employer

Assurit is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

Contact

11325 Random Hills Road, Suite 360

Fairfax, VA 22030

[phone]

[phone] (fax)

[e-mail]