Information Security Communications Specialist II

Location: Remote/Home-Based 

We are seeking a highly motivated and skilled Information Security Communications Specialist II to join our dynamic security team. The successful candidate will be a key player in maturing our Information Security Management System (ISMS) and fostering a security-conscious culture throughout the organization. This role is ideal for a communications professional with a passion for cybersecurity and a talent for making complex information accessible and engaging.

Responsibilities:

• Develop, write, and maintain all ISMS documentation, including policies, standards, procedures, and guidelines, ensuring they are clear, concise, and aligned with industry standard frameworks (e.g., ISO 27001, NIST)


• Manage the entire lifecycle of security documentation, from drafting and reviewing to publishing and continuous improvement


• Lead the development and execution of a comprehensive security training and awareness program


• Create engaging and effective training materials, including presentations, newsletters, and intranet content


• Coordinate and conduct security awareness campaigns and events to promote a culture of security


• Track and measure the effectiveness of the training and awareness program, providing regular reports to management


• Collaborate with subject matter experts across the security team to ensure the accuracy and relevance of all communications


• Serve as a primary point of contact for security-related communications and inquiries

Qualifications:

• Bachelor's degree in Communications, Information Technology, Information Security or a related field


• 3-6 years of experience in a communications role, with a strong preference for experience in information security or information technology


• Experience in Information Security compliance such as ISO27001, SOC2, FedRAMP


• Proven experience in developing and managing documentation for a formal management system (e.g., ISMS, QMS)


• Demonstrated experience in creating and delivering successful training and awareness programs


• Excellent written and verbal communication skills, with the ability to translate technical concepts into clear and engaging content for a non-technical audience


• Strong project management and organizational skills


• Security audit experience


• Familiarity with common security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls) is a plus


• Relevant certifications (e.g., CISM, CISSP) are desirable but not required