Cdi Cybersecurity Awareness Manager F H Crolles France

Job description

Chez ST, nous croyons à la puissance de la technologie pour stimuler l'innovation et avoir un impact positif sur les personnes, les entreprises et la société. Nous sommes une entreprise mondiale de semi-conducteurs, et notre technologie avancée ainsi que nos puces constituent la partie invisible du monde dans lequel nous vivons aujourd'hui. Lorsque vous rejoignez ST, vous faites partie d'une entreprise globale de plus de 115 nationalités et présente dans 40 pays, avec plus de 50 000 créateurs et fabricants de technologies microélectroniques à travers le monde ! Tous ensemble, nous formons une seule et même ST. Développer des technologies nécessite plus que du talent : il faut des personnes incroyables qui comprennent la culture de collaboration et de respect. Il faut des personnes passionnées, et avec l’envie de bouleverser le statu quo, de repousser les limites et de stimuler l'innovation, tout en libérant leur potentiel. ST a reçu la certification Top Employer France et le label HappyTrainees 2024 qui nous reconnaissent en tant qu’employeur de référence et démontrent notre engagement à placer l’humain au cœur de nos priorités. Do you thrive on building secure and resilient information systems? Do you have a strong interest in cybersecurity and want to develop your career in this domain? Please join us. ST is seeking a talented and motivated Cybersecurity Awareness Manager for the Central Information Security department. You will play a key role in building and strengthening a sustainable cybersecurity culture across ST, engaging employees at all levels and helping translate cybersecurity requirements and risks into meaningful behaviors. Under the guidance of the Head of InfoSec Governance, you will lead ST's cybersecurity awareness, training and related communication activities, going beyond traditional awareness campaigns toward an embedded cybersecurity culture and lasting behavioral change. Main responsibilities Your key responsibilities include: 1. Awareness content management: Develop, update and continuously improve cybersecurity awareness materials, including gamified eLearning, targeted learning content, campaigns and the Cybersecurity Awareness intranet. Identify needs for external expertise and coordinate external service providers such as communication agencies, instructional/content providers, designers, video producers and other creative partners. Define requirements and briefs, coordinate deliverables, monitor quality and delivery, and ensure that externally produced content is consistent with ST's cybersecurity messages, communication standard and objectives. 2. Phishing education: Leverage existing phishing exercises to reach the next maturity level by segmenting populations according to role, location and other relevant criteria, and adapting the frequency and type of exercises for different populations, including externals, students and new hires. 3. Community engagement: In close partnership with Internal Communication organizations at corporate, group and site levels, as well as Cybersecurity teams across central functions, sites and businesses, act as a Cybersecurity Community Manager. Develop communication channels and leverage real-world security incidents, alerts and cybersecurity solutions to increase employee engagement. 4. Strategic planning: Define, update and implement the strategic roadmap for transitioning from traditional cybersecurity awareness toward a behavioral change and cybersecurity culture program, leveraging modern communication channels and innovative approaches. 5. Performance tracking: Collaborate with the cybersecurity teams to enhance KPIs and dashboards, measure engagement and learning effectiveness, and track progress toward cybersecurity awareness and behavioral objectives. 6. Cybersecurity communications: Support Cybersecurity teams in creating clear, engaging and meaningful communications that translate complex cybersecurity topics into understandable messages and actionable behaviors. 7. Campaign and project coordination: Plan and coordinate awareness initiatives involving multiple internal stakeholders and external partners, managing priorities, timelines, deliverables and dependencies to ensure consistent execution globally. Skills and experience * Experience: 2 to 5 years of experience in a relevant field such as Information Security, Risk Management, Communication, Learning & Development, or a related discipline. * Communication: Strong communication and storytelling skills, with the ability to translate technical concepts and cybersecurity risks into clear, engaging messages and actionable behaviors for heterogeneous audiences. * Education: Master's degree or equivalent. * Behavioral knowledge: Familiarity with psychology, sociology, behavioral science or change-management concepts, and an understanding of how these approaches can improve employee and leadership engagement. * Communication and learning tools: Proficiency with communication and collaboration tools such as Microsoft 365, Viva Engage, video and eLearning platforms, combined with the ability to work effectively with cybersecurity subject-matter experts. * External provider management: Ability to work with external agencies, designers, content creators and other service providers, from translating cybersecurity needs into clear briefs through reviewing and validating deliverables. Experience managing external suppliers or creative agencies is an advantage. * Content & creative mindset: Ability to transform cybersecurity topics into compelling communication concepts and to determine when internal capabilities or external creative expertise are best suited to deliver them. * Leadership and coordination: Proven ability to define plans, drive execution and coordinate activities across different regions, functions and stakeholders, including external partners and suppliers. * Cybersecurity: A good understanding of cybersecurity concepts is expected, together with the ability to interact effectively with technical cybersecurity specialists. Deep technical expertise is not required, but curiosity and the ability to learn are essential. * Languages: Business fluency in English, both written and spoken. French version: Cybersecurity Awareness Manager Vous souhaitez contribuer à la construction de systèmes d’information plus sûrs et plus résilients ? Vous avez un intérêt marqué pour la cybersécurité et souhaitez développer votre carrière dans ce domaine ? Postulez. ST recherche un(e) Cybersecurity Awareness Manager, talentueux(se) et motivé(e). Vous jouerez un rôle clé dans le développement et le renforcement d’une culture cybersécurité durable au sein de ST, en engageant les collaborateurs à tous les niveaux et en contribuant à traduire les risques et exigences de cybersécurité en comportements concrets. Sous la responsabilité du Head of InfoSec Governance, vous piloterez les activités de sensibilisation, de formation et de communication liées à la cybersécurité pour ST, avec l’ambition d’aller au-delà des campagnes de sensibilisation traditionnelles pour développer une culture cybersécurité et un changement des comportements. Principales responsabilités Vos principales responsabilités seront les suivantes : 1. Gestion des contenus de sensibilisation : Développer, mettre à jour et améliorer en continu les supports de sensibilisation à la cybersécurité, notamment les e-learnings gamifiés, les contenus pédagogiques ciblés, les campagnes et l’intranet Cybersecurity Awareness. Identifier les besoins en expertises externes et coordonner des prestataires tels que des agences de communication, fournisseurs de contenus pédagogiques, designers, producteurs vidéo ou autres partenaires créatifs. Définir les besoins et briefs, coordonner les livrables, suivre la qualité et les délais, et garantir que les contenus produits en externe sont cohérents avec les messages, standards de communication et objectifs de cybersécurité de ST. 2. Sensibilisation a