Cyber Security Culture & Awareness Manager

Cyber Security Culture & Awareness Manager

1-2 days a week on-site / £70,000pa base salary.

This role will provide dedicated focus and expertise on building a strong organisational cyber culture change and supports the Senior Manager in all such activities.

My client is looking for someone who has a strong baseline of Information Security knowledge across the breadth of the space, along with direct experience of delivering Security Culture change and delivering a dramatic shift away from compliance driven behaviours towards a more rounded embedded approach to people cyber risk management.

You need to be able to deliver security cultural change within an organisation and work independently and act as a subject matter expert on security and Security Culture issues.

Requirements

To be successful in this role you need to have:

• Experience of what good looks like in terms of Security Culture for a financial institution.
• Strong baseline knowledge across the breadth of the security space (around Security+ level) and are passionate about keeping your security knowledge current
• Strong behavioural science knowledge and can effectively integrate behavioural science concepts into campaigns and interventions
• Experience in transforming security policy into strong campaigns to embed understanding and required behaviours
• Effectively research and contribute to a PCRM Strategy covering the employee life-cycle throughout their employment.
• Experience with industry technical tools and methods associated with Security Culture and deliver these throughout the organisation - this includes training Board members and NEDs.
• Experience in delivering security-based cultural change in organisations and have demonstrable experience in this area.
• The skills to assess and challenge cultural barriers which may prohibit the success of a Security Culture campaign.

Key Responsibilities

· Understands, contributes to, and communicates Information Security policy, standards and guidelines and ensures security principles are understood and applied across the business.

· Drives adoption of and adherence to security policies and standards through the provision of expert advice and guidance as well as intervention campaigns in order to ensure security risks are captured and communicated.

· Generates and drives forward on ample creative ideas to deliver engaging and exciting campaigns and events

· Identifies opportunities for PCRM, and Information Security as a whole, to be effectively incorporated into business activities

· Works with business leaders to communicate security topics, risks and identify areas for improvement in their business units for Security Culture.

Carbon60, Lorien & SRG - The Impellam Group STEM Portfolio are acting as an Employment Business in relation to this vacancy.