Security Analyst-Cyber Culture and Awareness

Job Description: Security Analyst Cyber Culture and Awareness

Southern Company is a leading energy provider in the United States, serving more than nine million customers across 18 states. We are dedicated to delivering clean, safe, reliable, and affordable energy to our customers and communities.

Do you have a passion for security and education?

We are looking for a seasoned communications expert to lead our cybersecurity culture and awareness efforts. The successful candidate will be responsible for continuing a cybersecurity culture shift at Southern Company by developing, implementing, and measuring the effectiveness of security education programs for our employees and stakeholders. The ideal candidate will have a strong background in cybersecurity, excellent verbal and written communication skills, and experience in creating and delivering training materials.

Key responsibilities include:

• Partner with security leadership and stakeholders to understand and prioritize top human risks and the key behaviors that indicate that risk.
• Develop and maintain a comprehensive security awareness program that effectively reduces human risk by changing the key risk behaviors.
• Partner with security leadership to develop measures demonstrating the impact of the awareness program and improvements in the overall culture of security.
• Chair a cross-cutting cybersecurity awareness steering committee staffed by security analysts and other business partners who have other assigned roles and responsibilities but share a passion for security culture.
• Create engaging and informative content on various security topics, including, but not limited to phishing, password management, data protection, and incident response.
• Develop and deliver security training sessions, webinars, newsletters, and campaigns to raise awareness and promote best practices among Southern Company staff and partners.

Qualifications:

• A bachelor’s degree in information security, marketing, adult education, or a related field, or equivalent work experience.
• Excellent communication and presentation skills, both written and verbal, and the ability to tailor the message to different audiences and levels of technical knowledge.
• A creative and innovative mindset, with the ability to design and deliver engaging and effective security education materials and activities.
• An understanding of security principles, frameworks, standards, and best practices, such as NIST and ISO.
• Ability to continuously learn about the latest cyber security trends, threats, and regulations and incorporate them into a cohesive curriculum.
• A high level of professionalism, integrity, and ethics, and a commitment to safeguarding the confidentiality and privacy of sensitive information.
• A certification in security awareness or training is preferred.

Southern Company (NYSE: SO) is a leading energy provider serving 9 million residential and commercial customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy infrastructure company with national capabilities, a fiber optics network, and telecommunications services. Through an industry-leading commitment to innovation, resilience, and sustainability, we are taking action to meet our customers and communities needs while advancing our commitment to net zero emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture and hiring practices have earned the company national awards and recognition from numerous organizations, including Forbes, Military Times, DiversityInc, Black Enterprise, J.D. Power, Fortune, Human Rights Campaign and more. To learn more, visit www.southerncompany.com.

Southern Company is an equal opportunity employer where an applicant’s qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 6803

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Company Services