Staff, Cyber Security Awareness Manager

Team Description:

The Security Governance and Strategy team is responsible for Coupang's Governance, Risk and Compliance, Security awareness and cultural change as well as the Security Project Management Office.

The responsibilities of this area are multifaceted. We are responsible for providing the security policies and procedures and ensure they are adhered too. We also maintain our security certifications and ensure that all regulatory obligations are met. We also provide technical project management to security projects, as well as managing the security budgets and resourcing for the information security team. We are also responsible for educating Coupang employees and customers on being cyber safe.

This is a fast paced organization, with lots of meaningful work, and you will enjoy an open, diverse work atmosphere.

Role Overview:

This individual is overall responsible for our security awareness and education program. Ultimately this person’s job is to reduce risk to Coupang by ensuring all employees, staff and contractors know, understand and follow our security policies and guidelines and behave in a secure manner and report security incidents.  This role also has a responsibility to educate our Coupang customers.

This role will ultimately reduce risk throughout the organization by driving employee behavior change. This is accomplished by engaging, educating, and reinforcing secure behaviors and mindsets across the enterprise.

You will need to Identify the top human risks to Coupang and the behaviors we need to change to mitigate those risks. You will enhance and maintain a security awareness program that effectively changes these behaviors so our employees act in a secure manner, reducing the most risk to our organization. 

Key Responsibilities:

• Work alongside the Governance team, and change and communications manager to uplift the cyber security awareness maturity of the organization
• Embrace the cyber security phishing simulations and develop a targeted program focusing on the most vulnerable and those of the highest risk
• Promote and drive forward the cyber security brand awareness Internally and externally
• Creates and manages a metrics framework that effectively measures employee behavior and compliance with cybersecurity policies, and tracks the overall effectiveness of the cybersecurity awareness program
• Establishes, and then maintains, an understanding of employee awareness around the organization
• Works with relevant business units to improve cybersecurity awareness and meet regulatory and compliance standards
• Targets campaigns to specific segments of the employee population
• Ensures employees and third parties understand, acknowledge, and fulfill all applicable information security policies
• Encourages employees to move beyond compliance of policies and toward adopting a security mindset
• Encourages employee engagement with security broadly
• Promote a culture of security awareness throughout the organization by communicating security messages regularly and effectively

Basic Qualifications:

Candidates will be evaluated primarily upon their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this role are as follows:

• BA or MA in Communications, Marketing, Psychology, IT or a related field (or relevant experience in these areas)
• 3+ years of relevant work experience, preferably in similar roles and/or either Communications, Marketing, IT communication or related fields
• Demonstrable experience in technical training, adult education, or marketing

Preferred Qualifications:

• Experience with security awareness training tools and platforms. This may include experience with learning management systems (LMSs), authoring tools, and other training delivery platforms.
• Experience with adult learning principles. This includes the ability to design and deliver training that is relevant and effective for adult learners.
• Verbal and written communication skills in English