Information Security Awareness Lead

About the job

Job Description

Norfolk Southern Corporation is seeking a highly motivated and qualified Information Security Technology Engineer to manage and implement NS’s Information Security Awareness program. The goal of the security awareness program is to reduce information security risk by ensuring that all users understand NS security policies and best practices when working with NS data and information systems. To that end, the Security Awareness Lead will partner with Information Security and cross functional teams to increase security awareness by developing and delivering innovative strategies, methodologies, technologies, communications, campaigns, and curriculums. As part of this role, The Security Awareness lead will manage the Security Awareness training platform, phishing campaigns, coordinate year-round cybersecurity events, maintain security awareness website, draft targeted security communications regularly and deliver insightful training and materials.

Education

Required: Bachelor’s Degree in computer science, information security, or similar curriculum

Skills Required

• Creative thinking and understanding of audience to produce engaging materials in a variety of formats and media, including storyboards, user guides, and gamification elements
• An understanding of relationship between human behavior and security
• Strong self-motivation, self-management, and time management skills, with the ability to work under pressure, prioritize work, meet targets, and intensify when appropriate
• Excellent communication and interpersonal skills (written and verbal) with the ability to communicate with all levels within the organization, including both technical and non-technical personnel including organizational skills, work ethic, and multi-tasking ability
• Proven experience in writing, designing, and delivering cyber related content
• Excellent creative and visual skills including graphic, web, print and slide design. Familiarity with design programs (InDesign, Illustrator, Photoshop) is also a plus
• Understanding of compliance regulations and requirements such as PCI, SOX, GLBA as well as various data security and privacy frameworks (NIST)
• Proven ability to lead with innovative ideas and an “out-of-the-box” thinker with the passion to learn and adapt
• Understand and use of basic project management methodologies, including the ability to plan, manage and maintain a complex, organization wide program over the longer term
• Excellent relationship-building and influencing skills in all mediums and throughout all levels of the organization

Skills Preferred

• Experience with deploying enterprise wide trainings through learning management systems
• Experience with ProofPoint

Work Conditions

Environment: Hybrid

On-Call: Yes

Weekend Work: As Required

Travel Required: 0-2 Days per Month

Company Overview

Norfolk Southern Corporation (NYSE: NSC) is a Fortune 300 organization and one of the nation’s premier transportation companies. Its Norfolk Southern Railway Company subsidiary operates approximately 19,500 route miles in 22 states and the District of Columbia, serves every major container port in the eastern United States, and provides efficient connections to other rail carriers. Norfolk Southern is a major transporter of industrial products, including chemicals, agriculture, and metals and construction materials. In addition, the railroad operates the most extensive intermodal network in the East and is a principal carrier of coal, automobiles, and automotive parts.

At Norfolk Southern, we believe in celebrating our individuality. By leveraging the unique backgrounds and viewpoints of our employees, we can create a culture of innovation, respect, and inclusion. We know that employees thrive in a workplace where differing viewpoints, ideas, and experiences are freely shared and valued. As such, we encourage all employees to contribute their distinctive skills and capabilities to our organization.

Equal employment opportunities are available to all applicants regardless of race, color, religion, age, sex, national origin, disability status, genetic information, veteran status, sexual orientation, and gender identity. Together, we power progress.

On September 9, 2021, President Biden signed Executive Order 14042. This order and the associated federal safety protocols for federal contractors that were issued on September 24, 2021, require covered contractors who work with the federal government to ensure that their employees are fully vaccinated for COVID-19 or approved for a health or religious accommodation by December 8, 2021. As a covered federal contractor, Norfolk Southern must adhere to these legal requirements. If you are made a conditional job offer, you will be required to provide proof of full vaccination, or apply and be approved for a health or religious accommodation prior to your start date