Paul Hastings LLP Hiring for Information Security Awareness Manager at Washington, DC  Full Time

Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world’s top financial institutions and Fortune Global 500 companies. With a strong presence throughout Asia, Europe, Latin America, and the U.S., we have the global reach and extensive capabilities to provide personalized service wherever our clients’ needs take us. As one of the world’s leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth.

We have an opening for an Information Security Awareness Manager.

The Information Security Awareness Manager is responsible for the firm’s information security awareness and training program. The goal of the program is to reduce information security risk by educating departments and users to drive a culture of security. This position will manage a broad set of activities, including: managing the security awareness training program, platform and managed services, creating and communicating information security campaigns, alerts and communications, enforcing compliance with training requirements, communicating security policies to all personnel, and other tasks as assigned. The Information Security Awareness Manager will also be responsible for regularly presenting reporting and metrics to leadership, and evaluating the effectiveness of techniques and resources.

In this capacity, the Information Security Awareness Manager will:

• Mature and maintain the strategy, goals, and objectives for the information security awareness and training program, including repeatable processes, reporting and metrics;
• Adapt strategy to incorporate and address emerging technologies and risks;
• Contribute to creating a culture of security by growing awareness, engaging departments and users in security, and reducing risky behaviors;
• Ensure that our information security awareness and training program communicates firm security policies and requirements so that users know, understand, and are able to follow them;
• Identify the top human risks to our organization and the behaviors needed to change to mitigate those risks and define achievable, observable, and measurable learning objectives (skills);
• Ensure multiple learning styles are included in the course design by using various communication channels;
• Continuously evaluate the effectiveness of existing information security training, education, and awareness program/activities;
• Collaborate with information security team to identify areas of risk and develop targeted and roles-based information security training, education, and awareness activities; and
• Work with vendors as needed to establish quotes, delivery, and execution of campaigns.

• A basic knowledge of information security and risk mitigation principles, theories, and techniques in daily work;
• Demonstrated understanding and use of basic project management methodologies, including the ability to plan, manage and maintain a complex, organization-wide program over the longer term;
• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel;
• Ability to craft messages matching the capability of the audience;
• Ability to communicate in a simple, clear, and concise manner to the various departments and personnel within our firm;
• Creative thinking and understanding of audience to produce engaging materials in a variety of formats and media, including user guides, and gamification elements; and
• A high degree of independence, integrity and confidentiality.

• Bachelor’s degree (strongly preferred);
• At least 7 years of work experience in the Information Security sector (required); and
• Working knowledge of NIST Cybersecurity Framework (CSF) (required).

Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.

Eligible employees can participate in the Firm’s comprehensive benefits program, which include the following:

• Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability
• Voluntary 401k plan and profit sharing
• 10 paid holidays per year, and a generous PTO program
• Family Support including Paid Parental Leave and Fertility coverage
• Bright Horizons (Back-up child care, elder care and online tutoring)
• Dependent Care
• Wellness programs (Employee Assistance Program, mental health and well-being events)
• Anniversary Bonus Program
• Professional Development Programs
• Transportation Allowance and Commuter Benefits
• Auto/Home/Legal Insurance
• Pet Insurance
• Employee discounts
• And more!

The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women’s Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives .

Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.