Senior Information Security Specialist, Cyber Culture

What you'll do

The Senior Information Security Specialist, Cyber Culture, plays a crucial role in the Enterprise Cyber Security Governance and Compliance team. Their primary responsibility is to establish key relationships throughout the company to work towards reducing human cyber risk at CTC. This involves developing and implementing cyber training plans, managing the Cyber Champion program, and enhancing the cyber security savvy of employees across various departments. They will also be responsible for creating engaging digital awareness materials, providing guidance for CTC's phishing and training program, and measuring, reporting and communicating the reduction of human risk to Senior Leadership. Furthermore, they will contribute to the learning and development strategy for internal cyber talent. This position requires both independent work and collaboration with Enterprise Cyber Security, IT, and other business units to ensure that CTC excels in fostering a positive cyber security culture.

What you’ll do :

Work in a SAFe Agile operating environment fostering a high-performing, inclusive and collaborative environment focused on continuous improvement

Foster relationships with our key partners such as the Communications, Incident Response and Threat Intelligence teams to develop behavior change, training, and communication plans to reduce human cyber risks

Translate technical details for non-technical audiences

Measure and report on cyber training compliance and human risk reduction to senior leadership

Maintain our Cyber Champion program and work with individual contributors across the business to grow cyber security knowledge and foster a collaborative relationship

Leverage tools such as Adobe Designer, Canva and Vyond to design and maintain informative, engaging, and easy to understand e-learning, videos, and digital cyber security materials

Increase engagement across communication platforms such as the internal Cyber Security Awareness social media channel and internal portal sites

Contribute to direction of the phish training program including support of the phish training & awareness tool - collaborating with vendors to take advantage of tool capabilities; upgrading technical components; and troubleshooting issues

Contribute to the cyber culture program by assisting with design of future roadmap items

Assess cyber roles against industry standards and provide feedback to managers

Create learning paths and training opportunities for cyber staff

Administer the learning and development platform

What you bring

Bachelor’s degree preferrable in a technical or business field

5+ years of experience in Information Security, Communications, E-Learning or Organizational Change Management

Experience in successfully designing training or implementing behavior change programs

Experience working in an Agile operating environment, preferably SAFe

Experience working in Information Security and demonstrable understanding of information security and IT concepts

Excellent interpersonal, communication and presentation skills & experienced in executive level presentations and briefings

Highly proficient with MS suite of application (Outlook, Word, Excel, PowerPoint, Access, and Visio), SharePoint and reporting tools (i.e., Power BI)

Proficient designing digital materials and working with tools like Adobe Designer, Vyond and Canva

Flexibility to adjust to multiple demands, shifting priorities and rapid change

Must be able to work independently and with minimal direct supervision

Excellent people and relationship building skills required

CISSP and / or SSAP designation would be an asset

Hybrid

At Canadian Tire we work flexibility embracing ‘Hybrid’ whereby individuals utilize a combination of working at a CTC campus and or virtually in service of outcomes. Determined by managers, decisions around work location will be made based on business and team needs and grounded in a desire to support individual well-being and personal needs. Our goal is to empower teams and individuals to make the right decisions for them, and we expect that to look different for everyone.