Senior Analyst, Information Security Awareness and Education

Location: Four Seasons Corporate Headquarters Toronto

About Four Seasons

Four Seasons is powered by our people. We are a collective of individuals who crave to become better, to push ourselves to new heights and to treat each other as we wish to be treated in return. Our team members around the world create amazing experiences for our guests, residents, and partners through a commitment to luxury with genuine heart. We know that the best way to enable our people to deliver these exceptional guest experiences is through a world-class employee experience and company culture.

At Four Seasons, we believe in recognizing a familiar face, welcoming a new one and treating everyone we meet the way we would want to be treated ourselves. Whether you work with us, stay with us, live with us or discover with us, we believe our purpose is to create impressions that will stay with you for a lifetime. It comes from our belief that life is richer when we truly connect to the people and the world around us.

About the location

Four Seasons Hotels and Resorts is a global, luxury hotel management company. We manage over 130 hotels and resorts and 50 private residences in 47 countries around the world and growing. Central to Four Seasons employee experience and social impact programming is the company’s commitment to supporting cancer research, and the advancement of diversity, inclusion, equality and belonging at Four Seasons corporate offices and properties worldwide. At Four Seasons, we are powered by people and our culture enables everything we do.

The Senior Analyst will support the delivery, operation, and continuous improvement of Four Seasons’ enterprise Cybersecurity Awareness program. The Senior Analyst will work closely with the Security Awareness Manager to execute program initiatives, with a particular focus on phishing simulations, training and education, communications, reporting, and program measurement.

The successful candidate will be an organized, analytical, and creative communicator who is comfortable working with data and collaborating with stakeholders across a global organization.

What You’ll Be Doing

Security Awareness

• Support the delivery and continuous improvement of the enterprise IT Security Awareness and Education program.
• Coordinate and execute the day-to-day activities of the phishing simulation program, including campaign development, testing, deployment, monitoring, follow-up, and reporting.
• Support the continued maturity of the phishing program by implementing enhancements, targeted education, and other initiatives established through the Security Awareness strategy.
• Analyze phishing simulation, training, and awareness data to identify trends, behaviours, and opportunities for improvement.
• Develop and maintain security awareness materials, including learning courses, communications, presentations, phishing education, and other resources.
• Support the delivery and administration of annual, targeted, and role-based Security Awareness training.
• Coordinate security awareness campaigns, events, and employee engagement activities.
• Support timely awareness and education activities in response to emerging cybersecurity threats and organizational needs.
• Collaborate with internal teams to support a comprehensive and cohesive Security Awareness program.
• Stay current with emerging cybersecurity threats, security awareness practices, technologies, and industry trends.

What You Bring

• 1-3 years of experience supporting security awareness, cybersecurity, training and education, communications, data analytics, or related programs.
• Experience coordinating or supporting phishing simulation and security awareness programs is preferred.
• Experience working with data, analytics, reporting, or data-driven programs is strongly preferred.
• Strong analytical skills with the ability to identify trends and translate data into meaningful insights.
• Excellent communication skills, both verbal and written.
• Strong attention to detail and organizational skills.
• Ability to manage multiple activities and priorities simultaneously.
• Ability to work collaboratively with stakeholders across the organization.
• Experience with security awareness platforms, learning management systems, reporting tools, or data visualization tools is an asset.
• Education or experience in cybersecurity, information technology, data analytics, communications, education, or a related field is preferred.
• Security+, CSAP, SSAP, or other cybersecurity/security awareness certifications are considered an asset.
• Understanding of cybersecurity principles, common threats, vulnerabilities, and attack techniques.
• Strong understanding of phishing and social engineering techniques.
• Familiarity with security awareness and phishing simulation tools and technologies.
• Strong data analysis and reporting skills; experience with Excel and data visualization tools such as Power BI is preferred.
• Familiarity with information security frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, and PCI DSS.
• Understanding of security incident reporting and response.
• Ability to clearly communicate with technical and non-technical stakeholders.

Key Skills

Detail-oriented, highly organized, and effective at prioritization and time management.

Analytical and curious, with an interest in using data to understand employee behaviours and improve program outcomes.

Creative mindset with an ability to contribute fresh ideas for engaging and effective security awareness activities.

Collaborative attitude and ability to work effectively with teams across the organization.

Ability to communicate cybersecurity concepts clearly to technical and non-technical audiences.

Ability to understand employee perspectives and consider the employee experience when delivering awareness initiatives.

Proactive and comfortable working within an evolving Security Awareness program.

Demonstrates integrity and ethical behaviour in accordance with the company’s values and expectations.

Coordinate and execute phishing simulations and associated education and follow-up activities.

Measure the effectiveness of phishing simulations, phishing reporting, training, and other awareness initiatives.

Analyze Security Awareness data and develop reporting to identify trends, behaviours, and areas of risk.

Support the implementation of improvements to mature the phishing and broader Security Awareness program.

Support the administration and completion of annual and targeted Security Awareness training.

Develop engaging awareness communications, educational materials, and employee resources.

Support awareness campaigns and initiatives across different employee populations, departments, regions, and roles.

Maintain program documentation, reporting, training records, and awareness resources.

Support the Security Awareness Manager with program initiatives, projects, and continuous improvement activities.

Salary Range: $70,000 - $95,000 CAD

This role will be a Hybrid working model, which will require 3 days per week in the Four Seasons Corporate Office located at 20 York Mills Road, Toronto, Ontario #LI-Hybrid

Four Seasons is committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act. If contacted for an employment opportunity, please advise Human Resources if you require accommodation.