Principal, Stakeholder Engagement at Northern Trust

Washington, District of Columbia, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Financial Services, CybersecurityIndustries

Requirements

Bachelor’s degree or equivalent relevant work or military experience
Minimum 7 years’ experience in cybersecurity field
Minimum 5 years’ communications and training experience
Previous experience directly supporting C-Suite executives
Previous financial sector experience
Excellent written communication skills
Ability to clearly communicate complex technical information to non-technical audiences
Strong interpersonal skills (collaboration, diplomacy, conflict resolution)
Attention to detail and meticulousness in task execution
Ability to manage multiple projects and deadlines effectively
Problem-solving skills and ability to think critically

Responsibilities

Lead company internal and external cybersecurity communications efforts
Provide internal communications support to the CISO, including drafting communications to employees and executives, developing presentations and talking points for internal meetings, and executing town halls
Develop and execute communications campaigns regarding cybersecurity control, policy, or process changes for employees and executives
Draft internal communications in the event of a cyber event or incident
Develop presentations and talking points in support of presentations to the Board
Represent the company in relevant industry forums (e.g., FS-ISAC, FSSCC, NCA, EWF, CRI) and participate in relevant committees and working groups
Ensure CISO and other cybersecurity SMEs are informed about relevant industry activities (e.g., exercises, working groups, white papers, conferences)
Provide external communications support to the CISO, including developing presentations and talking points for external speaking engagements
Lead company cybersecurity training and awareness efforts
Lead development of annual employee cybersecurity training that is compliant with relevant regulatory requirements, reflects current cyber risks to the company, and includes specific training for employees in high-risk roles (privileged users, developers, etc.)
Regularly conduct simulated phish testing based on current social engineering tactics targeting the company
Coordinate with cybersecurity leaders to determine their teams’ training needs and develop and deliver appropriate training
Develop a year-round cybersecurity awareness campaign for partners