Security Awareness and Training Program Manager

Job description

DESCRIPTION

Amazon Customer Service (CS) is one of the largest customer service organizations in the world with a strong culture, going back to the earliest days of Amazon. Our business operations include tens of thousands of Customer Service Associates around the globe who provide world-class support to customers 24 hours a day, 7 days a week, and in over 15 languages (and growing).

We focus on learning, sharing, innovating and having fun at work, and are customer-focused, with a direct line of engagement with our users. The Governance, Risk and Compliance (GRC) team have a new program focused on developing, operationalizing and managing a range of new and existing security initiatives with a significant positive impact. Our work is meaningful and directly impacts Amazon's bottom line.

We are looking for an innovative and creative, Security Awareness and Training Program Manager to play a significant role in helping us drive a culture of security within CS. You'll build user awareness by taking a holistic approach to the cybersecurity awareness program using diverse methodologies and concepts to spark interest. This role will require significant cross-functional collaboration with functional areas of Security, as well as other external teams and is critical in supporting the fundamental elements of our mission, earning and maintaining customer trust, and rigorously safeguarding customer data!

Responsibilities:

· Define and deliver the security awareness program objectives, strategies and tactics
· Design, build and run innovative security awareness, education and training initiatives that drive best practice adoption and identify human-based risks using a combination of interactive learning experiences and simulation-based training
· Develop regular targeted communications to business stakeholders on various security related topics
· Establish and report relevant metrics and Key Performance Indicators (KPIs) to communicate status and demonstrate progress of program performance
· Cultivate relationships with cross-functional teams and partners to improve the quality of security awareness training throughout the organization
· Manage resources and budget to meet strategic objectives and operational needs
· Organize security awareness events to support the development of a secure culture
· Continuously identify, assess, measure and monitor program value and iterate to increase effectiveness
· Collect evidence for compliance-related audits
· Monitor and identify the top human risks to our organization and the behavioral changes needed to mitigate those risks.

Desired profile

BASIC QUALIFICATIONS

· Bachelor's degree and 4+ years of relevant work experience in one or more of the following fields: technical, security or privacy education/training, information security, risk management, corporate communications, psychology or other related field
· Strong understanding of the relationship between human behavior and security
· Excellent verbal/written communication, analytical and independent judgment skills with ability to effectively interact with individuals at all levels of responsibility; must be able to positively influence and clearly explain complex information security concepts and technologies for both technical and non-technical audiences
· Strong time and project management skills with the ability to work independently
· Ability to navigate diverse global perspectives and promote an inclusive and collaborative environment
· Demonstrated knowledge of information security policies, standards, and/or governance controls