Job Description

City/State

Norfolk, VA

Work Shift

First (Days)

Sentara is hiring a Manager – Cyber Communications & Security Awareness

This position is fully remote.

Occasional travel is required one to two times a year.

The Manager – Cyber Communications & Security Awareness will serve as an integral team member helping drive cyber communications and education across the cyber portfolio in a manner that meets Sentara Health requirements. You will have responsibility for helping secure our workforce and driving a stronger security culture. Reporting directly to the Director – Cyber Execution & Operations, you will partner with Cyber Security leaders and team members to help them plan, craft, and distribute their cyber security communications. You will also have responsibility for maturing our existing security awareness and education program into a top-of-class program. This role involves exposure to all areas of our Cyber Security organization as well as regular interaction with various colleagues across Cyber, IT, and the business. People leadership experience required as you will have analysts reporting directly to you.

Responsibilities

As a proven executor who enjoys developing new and innovative ways to approach human risk, behavior change, and communication, you will ensure ongoing operationalization and maturation of both our cyber communications support and security awareness and education programs. You thrive on developing and implementing consistent messaging that is appropriately branded, helping others become better communicators, and developing tools and templates to help team members stay organized and on track. Focusing on people and mitigating human risk is interwoven in all that you do. You are comfortable and experienced in using action and persuasion to drive collaboration, accountability, and on-time delivery.

Cyber Communication Support

As direct manager of the team responsible for helping Cyber Security colleagues plan and create communications, you will ensure you and/or your team will:

• Support the Cyber Security team with all necessary communications including but not limited to project communications, tool or process rollouts/updates, emergency cyber alerts, etc.
• Develop and manage targeted and comprehensive communications plans: Guide identification of messaging needed, applicable stakeholders & audiences, and appropriate distribution channels. Drive creation of publication plan and timing.
• Ensure proper editing and proofing is conducted resulting in consistently professional, easy-to-understand communications that adhere to style guide and branding requirements.
• Track and adapt plans ensuring successful execution.
• Act as Cyber point person for all emergency communications and ensure a process is documented and kept up to date with RACI for on and off hour needs including clearly defined escalation paths.
• Act as primary point of contact between Cyber and Corporate Communications teams.
• Oversee and mature our Cyber SharePoint Online site to become best in class while ensuring proper administration and upkeep.
• Ensure all cyber communications support processes and how-tos are documented and kept up to date.

Cyber Security Awareness & Education

As direct manager of the team responsible for developing and executing the Cyber Security Awareness & Education program, you will ensure you and/or your team will:

• Mature the existing program. Build a yearly plan and have the team successfully execute against it.
• Continuously work with our Cyber team to identify our top risks and the behaviors needed to change to mitigate those risks. Then, execute applicable awareness and education actions to drive necessary change.
• Work with appropriate Cyber team members to identify different roles that require additional or specialized skills-based training to ensure colleagues are equipped to do their jobs safely and securely and ensure your team actions to support.
• Continue to mature high-visibility phishing program and associated metrics.
• Engage our workforce to enable them to exhibit behaviors and skills to make the most of our technology safely and securely.
• Promote how people benefit from security as a foundational program principle.
• Structure the program to be sustainable over the long-term, resulting in a positive security culture in alignment with our organization-wide cultural attributes.
• Work to support a future state where people believe in, value, and prioritize cyber security.

Overarching Team and Program Management

• Define and align analyst roles to efficiently and effectively support both spaces as they mature. Ensure cross-training where appropriate.

• Actively build strong relationships across different business departments and stakeholders to ensure ongoing program understanding, support, and engagement.
• Ensure programs evolve with changing company and security needs.
• Create a means of tracking and reporting on program deliverables to easily provide and communicate status, wins, and lessons learned.
• Build a metrics framework that will effectively measure and communicate impact of each program and report on up through executive leadership on an established cadence.
• Ensure programs meet all industry security training regulations, standards, and compliance requirements.

Requirements

• Experienced, proactive, self-driven executor with the ability to work independently.
• Strong analytical, problem-solving, and decision-making skills. Anticipates obstacles, develops plans to resolve them, and appropriately communicates. Experienced with effectively applying strategic thinking and visioning resulting in successful outcomes.
• Organized and detail-oriented. Able to work well under deadlines in a changing environment.
• Excellent interpersonal, written, and verbal communication skills.
• Ability to express complex technical concepts in business terms.
• Experienced working effectively in ambiguous situations and effectively determining the best path forward.
• Able to translate data into meaningful insights and written summaries.
• Excels at prioritization, presentation, and facilitation. Models related best practices.
• Comfortable owning your space and establishing a sense of urgency in the fabric of what you do.
• Ability to support business needs outside of standard business hours when needed. Ex. Emergency communications.
• Experience administering and managing Microsoft SharePoint Online sites.
• Strong Microsoft Word, PowerPoint, and Excel skills.
• Cyber security work experience.

Desired Characteristics

• Experience influencing cross-functional teams and initiatives.
• Expects resistance to change and enjoys the challenge of mitigating it in positive ways.
• Growth mindset. Change-oriented in both actions and words.
• Experience successfully executing multiple simultaneous initiatives – both planned and ad hoc.
• Proponent of people change management with experience incorporating it into your work.
• Agile work experience.
• Product methodology work experience.
• Experience working in a highly regulated environment.
• Healthcare experience.
• Experience with various industry regulations and frameworks (PCI, HIPAA, Data Privacy Laws, ISO27001/2, NIST, HITRUST, etc.).

Education

• 8+ years of relevant experience with a degree (Required)

OR

• 10+ years of relevant experience without a degree (Required)

• Experience in lieu of a Bachelor's Degree

Certification/Licensure

• No specific certification or licensure requirements

Experience

• 8 to 10+ years of relevant experience (Required)

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is: $116,729.60 - $216,777.60. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.

Talroo, Talroo-IT, #LI-DS1, #Indeed

Keywords: cyber communications, security awareness, PCI, HIPAA, Data Privacy Laws, ISO27001/2, NIST, HITRUST, people management, leadership, RACI,

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans

• Adoption, Fertility and Surrogacy Reimbursement up to $10,000

• Paid Time Off and Sick Leave

• Paid Parental & Family Caregiver Leave

• Emergency Backup Care

• Long-Term, Short-Term Disability, and Critical Illness plans

• Life Insurance

• 401k/403B with Employer Match

• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education

• Student Debt Pay Down – $10,000

•Pet Insurance
•Legal Resources Plan
•Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.

In support of our mission “to improve health every day,” this is a tobacco-free environment.

For positions that are available as remote work,Sentara Health employs associates in the following states:

Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.