This individual is overall responsible for our Security Awareness and Communication Program. Ultimately this role�s responsibility is to reduce risk to our organization by ensuring all employees, staff and contractors know, understand, and follow our security requirements and perform and operate in a secure manner. The scope of this position includes the ability to perform detailed analysis and provide recommendation strategies to senior team members. This individual will be involved in the educational development of employees and contingent workers in all areas of information security.

REPORTING STRUCTURE & WORK SETTING

This role reports to the Director of Enterprise Cybersecurity. This role manages the Security Awareness and Communications Program and one team resource:

1) Employee: Information Training and Communication Specialist

The role is a Full Time, Onsite position located at International Plaza in Dallas, TX. This is not a remote, off-site or WFH based position.

OTHER REPRESENTATIVE DUTIES

NOTE: The essential duties and primary accountabilities below are intended to describe the general content of and requirements of this position and are not intended to be an exhaustive statement of duties.

• Ensure the Security Awareness Program meets all industry regulations, standards, and compliance requirements.
• Ensure the Security Awareness Program communicates our security policies and requirements so that employees know, understand and can follow them.
• Identify the top human risks to the organization and the behaviors that need to change to mitigate those risks. Develop and maintain a security awareness program that effectively changes these behaviors so our employees act in a secure manner, reducing the most risk to our organization.
• Create a positive program that engages employees, to include focusing on changing behaviors both at home and at work. Ultimately we want our employees to demonstrate the same secure behaviors regardless of where they are or the devices they are using.
• Structure and maintain this program to be long term, so ultimately not changing just behaviors but culture.
• Create a metrics framework that can effectively measure delivery on these requirements to include specifics of phishing, repeat clickers, serial clickers, hospital program metrics, spearphishing, employee training and et al.
• Develop and deliver monthly Cybersecurity newsletters and quarterly Executive Awareness newsletters

• Other combinations of education, experience, or training that may be considered in substitution for the minimum requirements: A relevant combination of education and work experience, as described above, may be substituted on a year for year basis.
• Preferred education and/or experience: Experience working in cross-departmental teams and leading efforts through collaboration and influence.

EDUCATION AND WORK EXPERIENCE

• 3 years or < years in a management role with delivery and resource management responsibilities
• Bachelorâ��s Degree Preferred

SPECIALIZED KNOWLEDGE, SKILLS & ABILITIES:

Specialized training, certifications, or other special requirements:

• Ability to form complex 'communications / messages' in a simple, clear and concise manner to the various communities within our organization.
• Project management experience, the ability to plan, manage and maintain a complex, organization wide program over the longer term.
• Ability to manage a team to ensure timely completion of all program deliverables.
• Display practical knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behavioral change necessary to reduce the 'human factors' risk.
• Ability to communicate with and coordinate the activities of others.
• Understanding of the concepts of information risks and the different elements that make up risk. In addition have at a minimum a basic understanding of the different concepts of information security.
• Ability to interact and negotiate across departments
• Excellent management and communication skills
• Experience negotiating contracts and working with vendors
• Ability to work efficiently and independently with minimal supervision (i.e. self-motivated and willing to stretch to meet important deadlines).
• Experience establishing and maintaining effective relationships with clients, vendors, and team members.
• Teamwork: works collaboratively and shows respect for the needs and viewpoints of others.
• Professionalism: acts and behaves in a professional manner.
• Communication: clearly communicates in both verbal and written form, information in a timely, effective and professional manner.
• Customer Service: is responsive to customer/patient/colleagues' needs and expectations, and demonstrates commitment to providing quality service.
• Flexibility: adapts to and understands other points of view, and works effectively while acknowledging divergent or opposing perspectives.
• Managing Priorities: is able to multi-task and shift priorities as needed.

Preferred special requirements:

• Understanding of the concepts of information risks and the different elements that make up risk. In addition have at a minimum a basic understanding of the different concepts of information security.
• Experienced writing skills to support developing content and communicating Information Security principles at all levels from Executive to non-technical employee body across all of Tenet.
• Certified Information Systems Security Professional (CISSP) or Healthcare Certified Information Systems Security Professional (HCISPP) or other security certifications preferred.
• Bachelor degree preferred

Tenet Healthcare/USPI complies with federal, state, and/or local laws regarding mandatory vaccination of its workforce. If you are offered this position and must be vaccinated under any applicable law, you will be required to show proof of full vaccination or obtain an approval of a religious or medical exemption prior to your start date. If you receive an exemption from the vaccination requirement, you will be required to submit to regular testing in accordance with the law.

Employment practices will not be influenced or affected by an applicant�s or employee�s race, color, religion, sex (including pregnancy), national origin, age, disability, genetic information, sexual orientation, gender identity or expression, veteran status or any other legally protected status. Tenet will make reasonable accommodations for qualified individuals with disabilities unless doing so would result in an undue hardship.