Sr. Security Education Analyst

Department Overview:Overview:As a member of the Security Education & Engagement team at Oportun, the Security Education & Engagement Analyst develops, deploys, and enhances enterprise-wide cybersecurity awareness and training programs; helps establish standardized cybersecurity practices within the firm; and aids internal and external cybersecurity communications. Analysts are expected to stay up-to-date on the latest cybersecurity intelligence, regulations, standards, and compliance requirements to know, understand, and adhere to Oportun security education. This role requires the ability to work cross-functionally with business partners and upper management to deliver clear recommendations and solutions that drive results.By joining Oportun, the firm will invest in your personal growth in the areas of technical aptitude, leadership skills, and business acumen. This is an exciting opportunity to join an innovative organization where your contributions will have a meaningful impact on broadening access to financial products for consumers with little or no credit history.**Responsibilities**:- Support the Security Engagement & Education team with responsibilities that include: (1) Developing, implementing, and managing enterprise-wide cybersecurity awareness and training programs, (2) Leading external and internal cybersecurity communications, (3) Establishing and maintaining standardized cybersecurity practices within the organization, and (4) Ensuring all employees and related resources know, understand, and adhere to Oportun security requirement- Support the developing and maintaining of internal Cyber Awareness, Training and Comms programs (including onboarding, annual security training, etc.) that align with the organization’s strategic plans and objectives- Support the development of clear and effective firm-wide communications regarding cybersecurity training, compliance, best practices, etc.- Support ensuring of internal security programs and practices meet all industry regulations, standards, and compliance requirements (e.g. GLBA, FFIEC, SOX, COBIT, ITIL, PCI-DSS, NIST, CIS Critical Security Controls, Regulation P, etc.)- Support developing and executing response plans related to internal and external cyber incidents- Research and identify top human risks to the organization and the behaviors that must change to mitigate those risks- Suport developing and updating a metrics framework that can effectively measure firm-wide cybersecurity requirements- Support developing and maintaining training programs, certification roadmaps, etc. for security team members- Proactively inform and influence others in order to maintain the balance required between business needs, project partner strategy and standards, and financial requirements and budgets- Support Security Compass and SD Elements in the training of Secure Development Practices- Provide business units with the training and resources required to move security to the left- Synthesize and unify security communications across the organization and externally- Develop and maintain the SecEdu metrics and analytics program (i.e. training % completion)- Provide SecEdu advisory services to the organization (i.e. function-based security training)Qualifications:- 3+ years of technical experience or interfacing directly with a security or technology team- Bachelor’s degree / Graduate degree from an accredited institution in a field of study related to the role- Ability to form complex ‘communications / messages’ in a simple, clear and concise manner to the various communities within our organization (this can include different cultures, nationalities, international locations and languages)- Proven track record of deploying and measuring effectiveness of security awareness to a global audience, leveraging LMS, webcasts, and other technology- Experience working with common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT- Familiarity and experience with IT/Security/Training toolset: KnowBe4, Security Compass, Cornerstone, Slack, LinkedIn Learning, Pluralsight, and Confluence- Knowledge of security policies and principles of information handling and data protection- Strong leadership skills with proven ability to influence and garner support for objectives- Ability to build and maintain strong cross-functional partnerships and relationships at all levels of the organization- Effective communication and strong executive-level presentation skills, while interacting with business executives from many disciplines (compliance, risk, operations, fraud, technology, business intelligence, finance, training, legal, cybersecurity, etc.)- Courageous, action-oriented, and results-drivenCompany Overview:Oportun (Nasdaq: OPRT) is an A.I.powered digital banking platform that seeks to make financial health effortless for anyone. Driven by a mission to provide inclusive and affordable financial service