Director, IT Security Awareness

About the job

Overview

Our Team/Summary

As Discovery Communications’ portfolio continues to grow – around the world and across platforms – the Global Technology & Operations team is building media technology and IT systems that meet the world class standard for which Discovery is known. GT&O builds and implements and maintains the business systems and technology that are critical for delivering Discovery’s products, while articulating the long-term technology strategy that will enable Discovery’s growing pay-TV, digital terrestrial, free-to-air and online services to reach more audiences on more platforms.

From Amsterdam to Singapore and from satellite and broadcast operations to SAP, we are driving Discovery forward on the leading edge of technology.

Within our Information Security team, there has never been a busier or more urgent time to obtain the best talent we can for a function so critical to Discovery. In light of the constant threats and attacks occurring in companies across the globe, and across all industries, the Information Security Team at Discovery is a growing group of cyber security professionals. We are using the latest tools and resources to protect everything from our internal infrastructure to the shows we broadcast and stream across the globe on Discovery Channel, Animal Planet, Discovery ID, TLC, EuroSport and more. From Discovery Channel to TLC, Animal Planet to Eurosport, US to Singapore, India to LA, we are tasked with cyber protection: training employees, and implementing the best of the best in tools, resources, monitoring, threat detection, and more.

The Role

The Director of Information Security Awareness is responsible for our Global Security Awareness and Education program. Ultimately, this person’s job is to reduce risk to our organization by promoting a strong cybersecurity culture, ensuring all employees, staff and contractors know, understand and follow our security requirements and behave in a secure manner. The security awareness program must meet all industry regulations, standards, and compliance requirements, and communicate our security policies and requirements in a way that facilitates knowledge, understanding, and practical applications.

Responsibilities

• Collaborate with cybersecurity and technology leadership to define awareness program strategy, including identifying the top human threats to our organization, behaviors needed to mitigate those threats, and cybersecurity communication and education initiatives to encourage those behaviors.
• Develop and maintain a security awareness program that effectively fosters a culture of security and promotes desired behaviors. Generate fun, creative, new ideas to enhance engagement across the global employee population.
• Develop strategic marketing plans & creative marketing campaigns promoting InfoSec and cybersecurity best practices, execute through social media and internal communication best practices.
• Develop and evolve internal digital presence for InfoSec: Source content, write, and/or edit blurbs and short articles, videos, infographics, etc leveraging internal and external talent to create engaging content.
• Assist with executive communications and scripting, as well as one-off communications as needed.
• Create and maintain a metrics framework to measure the program’s impact on adoption of good cybersecurity practice and adherence to Discovery cybersecurity requirements. Track KPIs, gather feedback, calculate ROI, and continuously assess opportunities for improvement.
• Actively participate in strategic initiatives in accordance with the Information Security Roadmap, and contribute to key projects as required.

Qualifications

Required Qualifications

• Ability to convey complex topics in a simple, clear and concise communications to a diverse, global audience
• Self-starter, strong organizational skills, ability to work effectively with internal & external entities and executives to drive projects to completion
• Project management experience, the ability to plan, manage and maintain a complex, organization wide program over the longer term
• Demonstrated ability to coordinate people and teams to project/activity completion and the ability to work in a team environment, sharing workloads and responsibilities
• Ability to thrive in a fast-paced, dynamic environment where requirements and procedures continuously evolve
• Understanding of the concepts of information security and cyber risk
• Good familiarity with best-practice communication methods and technology
• Basic proficiency with design and layout; knowledge of Adobe Creative Suite, and content management/publishing systems
• Must have legal right to work in the United States

Preferred Qualifications

• 5+ years of IT experience in InfoSec awareness or related field
• 8+ years of Marketing or Communications experience, preferably corporate & specifically internal communications.
• Certifications related to Information Security (eg, CISSP, CISM, CRISC) and Project Management (eg, PMP)