Information Security Ops - Manager, Human Risk Management

Overview

This position is dedicated to the understanding, measuring, and mitigation of the information security risks associated with human behavior within the organization. It seeks to cultivate a culture which embraces cybersecurity principles and consistently incorporates them into daily functions at all levels of the enterprise. A person in this position manages the Human Risk Management team and program, providing guidance, mentorship, and oversight.

The ideal candidate will have a proven track record of effectively translating complex technical subject matter into real world, easy to understand verbal and written content tailored to the intended audience, acting as a catalyst for positive behavior change, and strategic leadership experience.

• Develops strategy for management of the team’s human risk management efforts, cybersecurity ambassador program, awareness training, simulated phishing campaigns, required annual and role-specific training, training presentations, and intranet, security alert, and communications content creation.
• Acts as a trainer, mentor, and coach to team members. Manages the team’s administrative functions and performance reviews.
• Provides oversight, ensuring program workflows and procedures are followed with adherence to defined service expectations and deliverable deadlines.
• Oversees maintenance, development and expansion of program playbook, process documentation, and training resources.
• Develops, manages, and improves metrics, reporting, and delivery strategy for the Human Risk Management Program and for the Information Security Organization overall.

• Oversees applicable external and internal audits, regulatory responses, data and records retention practices.
• Responsible for enforcing the enterprise’s controls for the systems the team administers.
• Provides guidance on matters of strategic content and training delivery and audience engagement.
• Maintains oversight and provides guidance for collaborative work with other business areas and teams on Human Risk Management projects and continued program development.
• Acts as a liaison and ambassador for the team with other business areas, educating others on general human risk and information security concepts, seeking buy-in where needed.

• Bachelor's degree.
• 10 to 12 years of experience.
• Two to five years of supervisory/management experience.
• Additional Qualifications:
  • Ten or more years of applicable experience may be considered in lieu of a bachelor’s degree.
  • Eight or more years of experience with corporate communication or education efforts: proven presentation and communication skills, to include verbal, visual, and written.
  • General knowledge of insurance concepts.
  • Demonstrated knowledge of cybersecurity concepts.
  • Six to eight years of experience working with creative suite software and MS office tools.
  • Familiarity with using virtual rewards programs, gamification technology, or social media to increase awareness and integration of awareness principles.
  • Mental agility, attention to detail, creativity, and innovative thinking.
  • Demonstrated project or task management skills.
  • Demonstrated ability to plan and facilitate both in person and remote meetings effectively, and efficiently.
  • Possess an understanding of the concepts of confidentiality, integrity, and prioritization strategy.

• SSAP, CISSP, CompTIA Security+, and other certifications are desirable.

Our job titles may span more than one career level. The actual base pay is dependent upon many factors, including training, transferable skills, work experience, business needs, and market demands. The base pay is subject to change and may be modified in the future.

American National offers eligible employees and their families medical, dental, vision, and basic life insurance. Employees are able to enroll in our company’s 401k plan. Employees also receive annually a bank of paid time off and paid holidays. We aspire to see people for what they bring to our corporate culture by supporting an inclusive work environment, including an emphasis on a healthy work-life balance, development opportunities, and a…