Analyst, Security and Technology Awareness
The New York Times is looking for an analyst who is passionate about promoting security and technology awareness across our newsroom, engineering, and business departments. You will help design technical training and communications throughout the organization, striving to cultivate a company-wide security culture where all employees share responsibility for safeguarding and protecting us.
Based in New York City, this hybrid role involves regular in-person office visits to host group training sessions and individual meetings with staff.
Enterprise Technology enables the people, platforms, and practices that support The New York Times' journalism and business operations. We partner with departments across the company to help employees work securely, and productively through thoughtful technology solutions. We support the systems and capabilities that keep us running while looking for new ways to reduce friction and improve the daily experience of our workforce.
The Education team's mission is to help our technical and non-technical workforce adopt secure, technology practices through data-driven insights, training, and specialized programming that inspire meaningful behavior change.
This is a hybrid role based in our New York City headquarters. You can typically expect to come into the office 3 days/week.
Responsibilities:
- Partner with staff throughout the company to lead personal and group security and technology education sessions.
- Coordinate and lead workshops, events, and training projects focused on information security and IT topics and initiatives.
- Deliver high-touch technical support and 1:1 briefings for all staff, including the newsroom, providing hands-on guidance on digital hygiene, device hardening, and secure communication workflows.
- Craft and distribute routine security updates for specific teams or the entire organization in collaboration with corporate communications.
- Produce instructional resources, including user guides, manuals, video content, and online modules.
- Support user requests and participate in an on-call rotation to address urgent security inquiries.
- Design and implement internal phishing simulation campaigns and remediation programs.
- Manage the logistical and administrative tasks required to schedule and track training projects.
- Report on security engagement metrics from direct interactions, identifying trends to help refine support strategies and harden newsroom defenses.
- Visit several bureaus and office sites to deliver training; expected travel is approximately 10% annually.
- Demonstrate support and understanding of our value of journalistic independence and a commitment to our mission to seek the truth and help people understand the world.
- You will report to the Manager, Information Security
Basic Qualifications:
- 2+ years of experience training on topics related to information security (phishing, account security, data security, secure communications) in person and virtually
- Familiarity with basic cybersecurity concepts, including social engineering, common tactics, techniques, and procedures.
- Experience helping people build and understand threat models for themselves and their function or role within an organization.
- Experience with breaking down complex topics to different audiences, including technical and non-technical partners.
- Comfortable with public speaking and adjusting content based on audience response.
- Understanding of the audience to produce engaging materials in multiple formats and media, user guides, and gamification elements.
Preferred Qualifications:
- Experience with phishing platforms.
- Experience with Zendesk or working in a support environment.
- Experience with learning, creating, and integrating new digital technology such as audio, video, social media, and other web-based technologies.
- Experience working with journalists or other high-risk groups.
- Experience working with leadership and management.
- Knowledge of networking basics, including VPNs, travel routers, and secure Wi-Fi configurations.
- Interest in or experience with specialized security hardware (e.g., YubiKeys, encrypted storage).
- Basic data analytics skills.
Additional Compensation and Benefits:
For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts (F.S.A.s), a company-matching 401(k) plan, employee stock purchase plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs.
For roles outside of the U.S., information on benefits will be provided during the interview process.
The annual base pay range for this role is between: $110,000 $120,000 USD
The New York Times Company is committed to being the world's best source of independent, reliable and quality journalism. To do so, we embrace a diverse workforce that has a broad range of backgrounds and experiences across our ranks, at all levels of the organization. We encourage people from all backgrounds to apply.
We are an Equal Opportunity Employer and do not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law. All applications will receive consideration for employment without regard to legally protected characteristics.
The New York Times Company will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email reasonable.accommodations@nytimes.com. Emails sent for unrelated issues, such as following up on an application, will not receive a response.
For information about The New York Times' privacy practices for job applicants, click here.
Please beware of fraudulent job postings. Scammers may post fraudulent job opportunities, and they may even make fraudulent employment offers. This is done by bad actors to collect personal information and money from victims. All legitimate job opportunities from The New York Times will be accessible through The New York Times careers site. The New York Times will not ask job applicants for financial information or for payment, and will not refer you to a third party to do so. You should never send money to anyone who suggests they can provide employment with The New York Times.
If you see a fake or fraudulent job posting, or if you suspect you have received a fraudulent offer, you can report it to The New York Times at NYTapplicants@nytimes.com. You can also file a report with the Federal Trade Commission or your state attorney general.
DiversityX
