MetLife

Role Value Proposition:

Security Awareness today is about managing human risk.   MetLife has an exciting opportunity for an experienced Security Awareness professional to join our Global Security GRCA (Governance Risk, Compliance, and Awareness) team, within the Office of Global Security. This role will be tasked to establish relevant and modernized Security Awareness programs, to manage MetLife’s human risk by fostering a strong security culture and promoting changes in organizational behavior.

As the manager of the strategic and operational aspects of the Security Awareness program, the role will oversee simulation/testing exercises, drive awareness training, and collaborate with communications teams to implement effective security awareness communications and strategies. The role will also be responsible for gathering insights on user behavior and implementing actions to manage risk. 

MetLife is looking for an innovative and collaborative self-starter who is not afraid of challenges and can offer creative solutions to drive continuous improvement. 

Key Responsibilities

• Program Development: Design and develop comprehensive security awareness programs focusing on current and emerging security threats.
• Risk Identification and Prioritization: Partner with the Incident Response Team, Security Operations, Cyber Threat Intelligence Teams, and others to better understand and prioritize our top human risks, and the key behaviors that manage those risks. 
• Training & Education:  Once the key behaviors are identified that manage risk, train the MetLife workforce on changing/exhibiting those key behaviors.  Partner with Learning and Development, Corporate Communications and Human Resources to create engaging training materials, including presentations, videos, and interactive modules, to educate employees about cybersecurity practices and policies.  
• Communication:  Develop effective communication strategies to regularly inform employees about security updates, threats, and best practices through newsletters, emails, and intranet posts.
• Campaign Management:  Plan and execute security awareness campaigns and events, such as workshops, seminars, and phishing, vishing, and smishing simulation exercises, to continuously improve security awareness.
• Metrics & Reporting:  Establish metrics to measure the effectiveness of security awareness programs and regularly report on progress, engagement levels, and areas for improvement.  
• Collaboration:  Work closely with IT, HR, and other departments to ensure security awareness programs align with organizational goals and compliance requirements.
• Policy Development:  Assist in the creation and enforcement of security policies and procedures that promote a culture of security within the organization.
• Incident Response:  Support the incident response team by providing security awareness insights and recommendations based on the latest threat landscape.
• Continuous Improvement:  Stay up to date with the latest security trends, threats, and technologies to ensure the organization’s security awareness programs are current and effective. 

Essential Business Experience and Technical Skills: 

Required: 

• Bachelor’s degree in information security, Computer Science, Education, Psychology, or a related field.
• Past working experience (3-5 years) building out and leading a Security Awareness Program in a global, highly regulated environment.
• Excellent verbal and written communication and presentation skills, and the ability to create engaging and informative content.
• Proven ability to lead and inspire a diverse group of employees towards a common goal of improving security awareness.
• Strong analytical skills to assess the effectiveness of security awareness programs and identify areas for improvement.
• Excellent interpersonal skills to work collaboratively across departments and with employees at all levels.
• Experience tracking key metrics for the preparation of key reports and development of executive communications for presentation to governance committees, senior leaders and regulatory bodies.
• Be experienced in leading people.
• Build and maintain effective relationships across the organization.

Preferred: 

At MetLife, we’re leading the global transformation of an industry we’ve long defined. United in purpose, diverse in perspective, we’re dedicated to making a difference in the lives of our customers.