Vp, Infosec Training

**Job Description**:
**Role Summary/Purpose**:
The Information Security Training & Awareness Leader ensures best in class Information Security related training and awareness across Synchrony, in addition to leading internal training for the Information Security department. This role works closely with HR and our internal learning departments to create layers of effective and impactful programs, including training and awareness content, consistent and effective awareness campaigns and in-person training & road shows. The goal of the Infosec Training & Awareness Leader is to build an engaging and strong cybersecurity culture across the company that encourages communication and involvement. In addition, the leader oversees, tracks, and facilitates ongoing development, training, and certification for employees of the Information Security department.

**_ We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events._**

**Essential Responsibilities**:

- Plans, develops, sources (internal /external) and delivers focused training programs and materials to educate Synchrony employees on a variety of Cybersecurity related disciplines including policies, standards, best practices, secure design, secure testing and other as-needed cybersecurity training.
- Establishes, and then maintains, an understanding of information security awareness across the organization
- Ensures awareness trainings, communications, and marketing are engaging and influence changes in employees’ behavior
- Develops, iterates and continuously improves upon programs (Training, communication, cyber and table top exercises, etc) as appropriate
- Works with relevant business units to improve security awareness and meet regulatory and compliance standards
- Encourages employees to move beyond compliance of policies and toward adopting a security mindset
- Encourages employee engagement with security broadly
- Creates and manages a metrics framework that effectively measures employee compliance with information security policies and the overall effectiveness of the security awareness program
- Assesses effectiveness of major programs using a metrics framework and incorporates employee feedback
- Manages the Information Security Awareness Team
- Manages Internal Training (e.g. PluralSite Administration, Certification Support, Onboarding Program, Rotation Program, Apprenticeship Program, SYF Leadership Training Coordinator, Lunch & Learns, etc.)
- Develops new internal training programs (e.g. Onboarding Program, Rotation Program, Lunch & Learns, Institute R&D Program Management, Social Engineering, etc.) including materials, FAQs, links, and communication plans
- Oversees and continues to improve internal training for the department
- Plans, develops and delivers training programs and materials to educate external clients/customers/partners on a variety of Cybersecurity related topics using multiple delivery media including videos, internet content and in-person delivery.
- Provides leadership, direction and analytical support for Synchrony’s phishing awareness program.
- Plans, develops, evaluates and updates training programs, after action reviews (AARs), course content, and materials to support regulatory requirements, including non-regulatory bodies such as PCI DSS, SWIFT, Fedline, etc.
- Implements methodologies to measure the success of training programs and awareness.
- Facilitates learning via on-line classes and webinars; incorporates a variety of presentation methods to successfully deliver content.
- Establishes and manages relationships and budget responsibilities with 3rd party vendors and training providers.
- Drives a strategy for building and enhancing cybersecurity learning to address the social engineering threat landscape.
- Perform other duties and/or special projects as assigned.

**Knowledge and Skills**:

- An ability to communicate risks to employees outside Information Security in a way that consistently drives objective decisions about risk that optimize the trade-off between risk mitigation and business performance
- Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
- Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part

**Qualifications/Requirements**:

- Bachelor's Degree in communications, marketing or other related field with 8 years related work experience, or in lieu of degree 10 years of related experience
- 5 Years Technical writing or design experience
- 5 Years Cyber Operations experience, Experie