What are the responsibilities and job description for the Security Analyst II - Cyber Security Awareness and Training position at Demo - Edward Jones?
This job posting is anticipated to remain open for 30 days, from 10-Apr-2025. The posting may close early due to the volume of applicants.
Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we’re proud to be privately-owned, placing the focus on our clients rather than shareholder returns.
Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.
People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.
View our Purpose, Inclusion and Citizenship Report.
¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.
Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.
People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.
View our Purpose, Inclusion and Citizenship Report.
¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.
Team Overview:
This role is critical in promoting a robust security culture across the organization by designing, managing, and improving cybersecurity training and awareness programs. The successful candidate will focus on phishing program operations, cybersecurity training, and GRC concepts while fostering cultural engagement and workforce behavioral change through creative and innovative initiatives. The role will partner with cross-functional teams to address cybersecurity risks, ensure regulatory compliance, and respond to firm and client awareness requests.
What You'll Do:
This role is critical in promoting a robust security culture across the organization by designing, managing, and improving cybersecurity training and awareness programs. The successful candidate will focus on phishing program operations, cybersecurity training, and GRC concepts while fostering cultural engagement and workforce behavioral change through creative and innovative initiatives. The role will partner with cross-functional teams to address cybersecurity risks, ensure regulatory compliance, and respond to firm and client awareness requests.
What You'll Do:
- Create cybersecurity awareness and training programs tailored to the organization's specific needs, roles, and responsibilities. Design training materials, modules, presentations, and resources to effectively communicate cybersecurity concepts and principles.
- Plan and execute simulated phishing campaigns to assess associates' susceptibility to phishing attacks and other social engineering tactics. Provide feedback and coaching to associates based on their responses to phishing simulations to reinforce cybersecurity awareness and behavior.
- Ensure that cybersecurity awareness and training programs comply with relevant regulatory requirements, industry standards, and best practices such as NIST CSF, NYDFS, SEC, etc. Incorporate specific training topics and materials to address regulatory compliance requirements related to data privacy, security controls, and incident reporting.
- Organize security awareness events, workshops, and campaigns to promote a culture of cybersecurity within the organization. Raise awareness about cybersecurity risks and initiatives through posters, newsletters, intranet announcements, and other communication channels.
- Customize training content based on associate roles, departments, and levels of technical expertise.
- Develop metrics and key performance indicators (KPIs) to measure effectiveness of the cybersecurity awareness and training program. Track and analyze training completion rates, quiz scores, phishing simulation results, and other relevant metrics to assess associate awareness and behavior.
- Collaborate with Digital, security, human resources, compliance, and other relevant departments to ensure alignment of cybersecurity awareness training efforts with organizational objectives and initiatives. Collaborate with stakeholders that are introducing new functionality to Home Office and the branches in regards to helping train users and incorporate into annual training as applicable.
- Conduct in-person and online training sessions to educate associates about cybersecurity threats, social engineering tactics, and security awareness best practices.
- Work with internal Fraud team to develop more cohesive and consistent training and awareness materials.
- Develop client facing articles and training. Offer guidance, resources, and support to associates and clients seeking assistance with cybersecurity related questions, concerns, and incidents; and serve as a trusted point of contact for associates to report suspicious activities, security incidents, or potential policy violations.
What Experience You'll Need:
- Bachelor's degree in Information Technology or Cybersecurity preferred or equivalent related work experience
- 1-3 years of experience in Cybersecurity training, GRC, or a related role within Financial Services or similarly regulated industries.
- Proven track record managing phishing simulation programs and security training platforms (e.g. KnowBe4, LMS).
- Experience creating and executing large-scale awareness campaigns using multimedia tools.
- Strong communication skills - exceptional written and verbal communication skills with the ability to craft messaging for technical and non-technical audiences.
- Analytical and strategic thinking - strong problem solving and critical thinking skills for addressing complex training needs.
- Collaboration and leadership - demonstrated ability to collaborate across diverse teams and levels of leadership and ability to work independently and drive initiatives.
- Technical Knowledge - strong understanding of cybersecurity principles, frameworks, and best practices (e.g., NIST, ISO, CIS controls).
- Knowledge of social engineering tactics (e.g. phishing, smishing, vishing) and how to mitigate them.
- Familiarity with security awareness training programs (e.g. KnowBe4, Proofpoint).
- Experience working with LMS (Learning Management Systems) and content delivery tools.
- Program Management and strategic thinking - strong program management skills and creativity in developing cybersecurity awareness campaigns.
- Employee Training
- Employer Branding
- Onboarding
- Technical Training
- Training Delivery Management
- Training Administration
- Training Facilitation
- Training Needs Analysis
- Customer Engagement
- Customer Experience Management
At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received.
Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones
Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones
Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones
Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones
Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.
Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Edward Jones is prohibited from hiring individuals with certain specified criminal history as set forth in Section 3(a)(39) and 15(b)(4) and Rule 17a-3(a)(12) of the Securities and Exchange Act of 1934, and conducts background reviews consistent with FINRA Rule 3110(e). A copy of a notice regarding the provisions of the Los Angeles County Fair Chance Ordinance is available at: dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf.
