Information Security Awareness Advisor

Range:
78,400.00 - 117,600.00 CAD

Job Description:
Information Security Awareness Advisor

GAME ON - OLG needs you

We’ve said GAME ON, and we mean it - OLG is rapidly transforming its organization to better serve Ontarians by delivering great gaming experiences through our digital, retail lottery, and land-based gaming channels. Over the course of fiscal 2022-23, OLG delivered a record $2.5 billion in net profit to the Province of Ontario. OLG is now expanding our horizons even further, with a new strategic direction, to become a world class gaming entertainment leader with a globally admired digital platform.

We are ready to take this game to the next level and need a passionate Information Security Awareness Advisor to develop, review, implement and maintain the organization’s information security awareness program, ultimately reducing risk throughout the organization by driving employee behaviour change through engaging, educating, and reinforcing secure behaviours and mindsets.

YOUR ROLE IN THE GAME

Reporting to the VP Cyber & Information Security Officer, you will be empowered to:
- Specifies solutions for use in learning and development cybersecurity programs.- Commissions the development of learning materials and defines learning outcomes.- Leads learning programs, recommends and specifies learning interventions for design, development and deployment according to agreed learning outcomes including industry trends and regulatory standards.- Prepares and delivers learning activities tailored to various audiences and specific learning objectives.- Uses a broad range of learning delivery techniques to build learner skills and knowledge. Develops and updates examples and case study materials.- Observes and evaluates learner performance, offering guidance and tailored instruction.- Adjusts delivery approaches and materials to enhance learner experience, responding to specialized queries and ensuring objectives are met.- Produces information artefacts that are accurate, current, relevant and easily understood by the intended audience.- Clarifies detailed content requirements with clients and representatives of the intended audience.-
- Makes informed decisions about the best way to present information to an audience. Applies moderation and editing processes to content supplied by others.- Implements stakeholder engagement/communications plans. Collects and uses feedback from customers and stakeholders to help measure the effectiveness of stakeholder management.- Uses data to assess and improve the effectiveness of learning or educational activities.- Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems.

WHAT YOU NEED TO PLAY
- Knowledge & skills:_- Post-secondary degree, preferably in cybersecurity, psychology, communications/marketing, journalism, education or an equivalent combination of education, training and experience- Certified in Cybersecurity (CC), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Professional in Learning and Performance (CPLP), SANS Security Awareness Professional (SSAP) and/or other security certifications would be an asset.- Strong communication skills, especially the ability to communicate highly technical concepts to non-technical audiences.- Strong writing and presentation skills for delivering training sessions, materials, and awareness campaigns in both synchronous and asynchronous methods.- Strong stakeholder management skills collaborating with business and enterprise IT teams to gain support for and build effective cybersecurity awareness training programs.- Experience analyzing feedback to track the effectiveness of cybersecurity awareness training through assessments and metrics, identifying areas for improvement and adapting training programs accordingly.- Understanding of cybersecurity threats and cybersecurity best practices and experience conducting research on emerging cybersecurity trends, threats, and risks- Adult learning principles. This includes knowledge around designing and delivering training that is relevant and effective for adult learners.- Event planning experience, coordinating content for digital, live, and hybrid cybersecurity awareness events.- _Knowledge and experience with industry standards including PCI DSS, ISO 27001, SOC2, and NIST framework.- Knowledge and experience with training tools and platforms.- Knowledge and experience with graphic design utilities.- Marketing and/or business communication strategies and tactics- Experience with Microsoft Phishing Attack Simulation Training tool is an asset.
- Experience:_- _Minimum of three (3) years’ experience in progressively advancing roles within Technology or related function- Minimum of five (5) years’ professional experience with providing cybersecurity training and awareness, internal communications, corporate communications, marke