Manager – Cyber Communications & Security Awareness

Sentara Health; Virginia; Hybrid; USD 140,000 - 209,000; Full time

Benefits offered by this job

Annual discretionary bonus

Comprehensive benefits package

Flexible remote work

Remote-eligible position

Job summary

Sentara Health in the United States is seeking a Manager – Cyber Communications & Security Awareness. This remote role leads a team that crafts cyber security communications and matures the security awareness program to build a stronger security culture.

You will partner with Cyber Security and IT leaders, oversee SharePoint Online documentation, and drive metrics to show impact. Travel is light (1–2 times per year) and reporting is to the Director – Cyber Execution & Operations.

Qualifications

• 8+ years of relevant experience with a degree (Required) OR 10+ years of experience without a degree.
• Experience leading analysts and building security communications programs.
• Ability to translate complex cyber concepts into business terms.

Responsibilities

• Oversee cyber communications strategies, ensuring branded, clear messaging.
• Develop and mature security awareness and education programs.
• Lead the Cyber Communications team and collaborate with Corporate Communications.
• Maintain SharePoint Online site and related processes.
• Define metrics and report program outcomes to executives.

Skills

People leadership

Cyber communications

Security awareness

Strategic communication

Cross-functional collaboration

Stakeholder management

Education

Bachelor's degree or equivalent experience

Tools

Microsoft SharePoint Online

Microsoft Word

Microsoft PowerPoint

Microsoft Excel

Job description

City/State Norfolk, VA Work Shift First (Days) Overview: Sentara is hiring a Manager – Cyber Communications & Security Awareness This position is fully remote. Occasional travel is required one to two times a year.

Overview Role Summary The Manager – Cyber Communications & Security Awareness will serve as an integral team member helping drive cyber communications and education across the cyber portfolio in a manner that meets Sentara Health requirements. You will have responsibility for helping secure our workforce and driving a stronger security culture. Reporting directly to the Director – Cyber Execution & Operations, you will partner with Cyber Security leaders and team members to help them plan, craft, and distribute their cyber security communications. You will also have responsibility for maturing our existing security awareness and education program into a top-of-class program. This role involves exposure to all areas of our Cyber Security organization as well as regular interaction with various colleagues across Cyber, IT, and the business.

People leadership experience required as you will have analysts reporting directly to you.

Responsibilities

As a proven executor who enjoys developing new and innovative ways to approach human risk, behavior change, and communication, you will ensure ongoing operationalization and maturation of both our cyber communications support and security awareness and education programs. You thrive on developing and implementing consistent messaging that is appropriately branded, helping others become better communicators, and developing tools and templates to help team members stay organized and on track. Focusing on people and mitigating human risk is interwoven in all that you do. You are comfortable and experienced in using action and persuasion to drive collaboration, accountability, and on-time delivery.

Cyber Communication Support

As direct manager of the team responsible for helping Cyber Security colleagues plan and create communications, you will ensure you and/or your team will:

• Support the Cyber Security team with all necessary communications including but not limited to project communications, tool or process rollouts/updates, emergency cyber alerts, etc.
• Develop and manage targeted and comprehensive communications plans: Guide identification of messaging needed, applicable stakeholders & audiences, and appropriate distribution channels.
• Drive creation of publication plan and timing.
• Ensure proper editing and proofing is conducted resulting in consistently professional, easy-to-understand communications that adhere to style guide and branding requirements.
• Track and adapt plans ensuring successful execution.
• Act as Cyber point person for all emergency communications and ensure a process is documented and kept up to date with RACI for on and off hour needs including clearly defined escalation paths.
• Act as primary point of contact between Cyber and Corporate Communications teams.
• Oversee and mature our Cyber SharePoint Online site to become best in class while ensuring proper administration and upkeep.
• Ensure all cyber communications support processes and how-tos are documented and kept up to date.

Cyber Security Awareness & Education

As direct manager of the team responsible for developing and executing the Cyber Security Awareness & Education program, you will ensure you and/or your team will:

• Mature the existing program.
• Build a yearly plan and have the team successfully execute against it.
• Continuously work with our Cyber team to identify our top risks and the behaviors needed to change to mitigate those risks.
• Then, execute applicable awareness and education actions to drive necessary change.
• Work with appropriate Cyber team members to identify different roles that require additional or specialized skills-based training to ensure colleagues are equipped to do their jobs safely and securely and ensure your team actions to support.
• Continue to mature high-visibility phishing program and associated metrics.
• Engage our workforce to enable them to exhibit behaviors and skills to make the most of our technology safely and securely.
• Promote how people benefit from security as a foundational program principle.
• Structure the program to be sustainable over the long-term, resulting in a positive security culture in alignment with our organization-wide cultural attributes.
• Work to support a future state where people believe in, value, and prioritize cyber security.

Overarching Team and Program Management

Define and align analyst roles to efficiently and effectively support both spaces as they mature. Ensure cross-training where appropriate. Actively build strong relationships across different business departments and stakeholders to ensure ongoing program understanding, support, and engagement. Ensure programs evolve with changing company and security needs. Create a means of tracking and reporting on program deliverables to easily provide and communicate status, wins, and lessons learned. Build a metrics framework that will effectively measure and communicate impact of each program and report on up through executive leadership on an established cadence. Ensure programs meet all industry security training regulations, standards, and compliance requirements.

Requirements

Experienced, proactive, self-driven executor with the ability to work independently. Strong analytical, problem-solving, and decision-making skills. Anticipates obstacles, develops plans to resolve them, and appropriately communicates. Experienced with effectively applying strategic thinking and visioning resulting in successful outcomes. Organized and detail-oriented. Able to work well under deadlines in a changing environment. Excellent interpersonal, written, and verbal communication skills. Ability to express complex technical concepts in business terms. Experienced working effectively in ambiguous situations and effectively determining the best path forward. Able to translate data into meaningful insights and written summaries. Excels at prioritization, presentation, and facilitation. Models related best practices. Comfortable owning your space and establishing a sense of urgency in the fabric of what you do. Ability to support business needs outside of standard business hours when needed. Ex. Emergency communications. Experience administering and managing Microsoft SharePoint Online sites. Strong Microsoft Word, PowerPoint, and Excel skills. Cyber security work experience.

Desired Characteristics

Experience influencing cross-functional teams and initiatives. Expects resistance to change and enjoys the challenge of mitigating it in positive ways. Growth mindset. Change-oriented in both actions and words. Experience successfully executing multiple simultaneous initiatives – both planned and ad hoc. Proponent of people change management with experience incorporating it into your work. Agile work experience. Product methodology work experience. Experience working in a highly regulated environment. Healthcare experience. Experience with various industry regulations and frameworks (PCI, HIPAA, Data Privacy Laws, ISO27001/2, NIST, HITRUST, etc.).

Education

8+ years of relevant experience with a degree (Required) OR 10+ years of relevant experience without a degree (Required) Experience in lieu of a Bachelor's Degree Certification/Licensure No specific certification or licensure requirements Experience 8 to 10+ years of relevant experience (Required)

Compensation & Benefits

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $139,672.00 - $208,790.40 annually. Additional compensation may be available for this role, such as shift differentials, on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually. Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan

Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Diversity & Inclusion

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco-free environment.

Remote Eligibility

For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Company Overview

Sentara Health is a Virginia and Northeastern North Carolina based not-for-profit integrated healthcare provider that has been in business for over 131 years. Offering hundreds of sites of care including 12 hospitals, PACE, home health, hospice, medical groups, imaging services, therapy, outpatient surgery centers, and an 858,000 member health plan. The people of the communities that we serve have nominated Sentara “Employer of Choice” for over ten years. U.S. News and World Report has recognized Sentara as having the Best Hospitals for 15+ years. Sentara offers professional development and a continued employment philosophy!