Security Awareness Specialist

1-2 days a week on-site.
Not sure what skills you will need for this opportunity Simply read the full description below to get a complete picture of candidate requirements.
Circa £70,000 + bonus & benefits
This role will provide dedicated focus and expertise on building a strong organisational cyber culture change and supports the Senior Manager in all such activities.
It is widely recognised within industry that people cyber risk management needs to be built as part of an organisation’s culture and this role is key to helping embed these good behaviours and monitoring these.
About You
We are looking for someone who has a strong baseline of Information Security knowledge across the breadth of the space, along with direct experience of delivering security culture change and delivering a dramatic shift away from compliance driven behaviours towards a more rounded embedded approach to people cyber risk management.
You need to be able to deliver security cultural change within an organisation and work independently and act as a subject matter expert on security and security culture issues.
Requirements
To be successful in this role you need to have:
Experience of what good looks like in terms of security culture for a financial institution.
Strong baseline knowledge across the breadth of the security space (around Security+ level) and are passionate about keeping your security knowledge current – security qualifications to demonstrate this a plus
Strong behavioural science knowledge and can effectively integrate behavioural science concepts into campaigns and interventions
Experience in transforming security policy into strong campaigns to embed understanding and required behaviours
Effectively research and contribute to a PCRM Strategy covering the employee life-cycle throughout their employment.
Experience with industry technical tools and methods associated with security culture and deliver these throughout the organisation - this includes training Board members and NEDs.
Experience in delivering security-based cultural change in organisations and have demonstrable experience in this area.
The skills to assess and challenge cultural barriers which may prohibit the success of a security culture campaign.
Key Responsibilities
· Understands, contributes to, and communicates Information Security policy, standards and guidelines and ensures security principles are understood and applied across the business.
· Drives adoption of and adherence to security policies and standards through the provision of expert advice and guidance as well as intervention campaigns in order to ensure security risks are captured and communicated.
· Generates and drives forward on ample creative ideas to deliver engaging and exciting campaigns and events
· Identifies opportunities for PCRM, and Information Security as a whole, to be effectively incorporated into business activities
· Works with business leaders to communicate security topics, risks and identify areas for improvement in their business units for security culture.