Global Cybersecurity Training & Awareness Lead

PURPOSE AND SCOPE:

The Global Cybersecurity Training & Awareness Lead will be a member of the Cybersecurity & Privacy Solutions Culture & Awareness team and will lead global phishing simulation campaigns and cybersecurity & privacy training and awareness actions at Fresenius Medical Care.  This role will actively support the development and implementation of advanced training and simulation strategies, program management and measurement, leading projects designed to continually improve and enhance the overall information security and privacy culture, posture and resilience across the company. The individual will help drive critical information cybersecurity and privacy initiatives across the enterprise in support of tools, policies & procedures, processes, and behavior changes.

PRINCIPAL DUTIES AND RESPONSIBILITIES:

• Develops and implements training and awareness campaigns for security & privacy tools, policies & procedures in a rapidly growing environment with cyber threats that are continuously evolving.
• Develops, recommends innovative approaches, evaluates, manages, and executes security & privacy awareness training plans and programs to garner awareness and influence behavior change across the enterprise.
• Manages social engineering and phishing training exercises globally.
• Promotes a highly collaborative approach when working with teams to deliver effective training and awareness.
• Translates complex security requirements into adoptable concepts that staff can easily and quickly absorb.
• Identifies, tracks and produces key program metrics, reports and dashboards to measure the effectiveness of the phishing, training and awareness program.
• Understands and stays current on best practices and guidance to achieving a security and privacy aware workforce.
• Explores AI-driven tools and adaptive learning technologies to incorporate into training and awareness initiatives, ensuring programs remain dynamic, personalized, and effective against emerging cybersecurity and privacy risks.
• Fosters messaging that information security and privacy enables business objectives.
• Manages the tactical execution of short- and long-term objectives through the coordination of activities with direct responsibility for results, costs, methods, and staffing.
• Understands compliance requirements with laws and regulations that affect cybersecurity and privacy for the healthcare industry.
• Reconciles discrepancies between various sources (internal tracking, controlled document repositories, staffing reports, training systems, etc)
• Manages and maintains training and awareness documentation (procedures, quick reference guides, training content, storyboards, communications, etc)
• Builds collaborative working relationships with stakeholders across the company.
• Performs work both based on specific instructions and independently when new or unusual situations arise.
• Leads and/or assists with various training & awareness projects as assigned by direct supervisor.
• Performs other training & awareness duties as assigned.

PHYSICAL DEMANDS AND WORKING CONDITIONS:

• The physical demands and work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION:

• Bachelor’s degree in management information systems, Computer Science, or business/science related field required.

EXPERIENCE AND REQUIRED SKILLS:

• 8-10 years of related experience with phishing campaigns and creating cybersecurity awareness across IT and business units
• Ability to operate as a pro-active and result-driven problem solver with excellent analytical and interpersonal skills.
• Demonstrated technical writing, communication, and presentation skills.
• Strong client services orientation and communication skills coupled with a high sense of urgency to keep appropriate partners informed, including solutions to overcome obstacles to deliver to expectation.
• Ability to work effectively in a highly collaborative and inclusive team environment. 
• Creativity in addressing technical challenges. 
• Proven record to deliver results.
• Ability to understand IT processes, management objectives risk appetite and tolerances and impact of objectives, risk appetite and tolerances and impact of changes to risk profiles.
• CISA, CISSP, CRISC, or other relevant certification(s) desired.
• Understanding of risk management, integration with enterprise risk management and business strategy.
• Experience in IT governance, risk, and controls, including governance frameworks.