Security Awareness and Culture Lead

Reference: mp793d1xswi090zzfatl

We are seeking a Security Awareness and Culture Lead to develop and deliver an organisation-wide programme that strengthens security behaviours, improves employee understanding of cyber risk, and supports a resilient security culture. You will work across business functions and levels of seniority to make security practical, engaging, and relevant to everyday activities. This role will suit an experienced security awareness, culture, communications, or behavioural change professional who can combine strategic thinking with hands-on delivery.

You will define and maintain the security awareness and culture strategy, informed by risk assessments, threat intelligence, audit findings, incident trends, and business priorities. Responsibilities will include creating engaging learning campaigns, coordinating mandatory and role-based training, managing phishing simulations, developing communications and guidance, and measuring the effectiveness of initiatives through meaningful metrics. You will collaborate with information security, technology, risk, compliance, human resources, internal communications, and business leaders to embed secure behaviours into processes and ways of working. You will also provide regular reporting on programme performance, identify areas for improvement, and help ensure activities remain aligned with relevant policies, standards, and regulatory expectations.

The successful candidate will have proven experience designing and delivering security awareness or behavioural change programmes within a complex organisation. You will have strong knowledge of cybersecurity principles, social engineering risks, and effective adult learning or engagement techniques. Excellent written and verbal communication skills are essential, along with the ability to tailor messages for technical and non-technical audiences. You should be confident influencing stakeholders, managing multiple priorities, analysing programme data, and working independently while building effective partnerships. Experience with awareness platforms, phishing simulation tools, campaign analytics, and recognised security frameworks would be advantageous. A proactive, creative, and collaborative approach is essential, as is a genuine interest in helping people make secure decisions.

COMPETITIVE SALARY
Added 29/09/2026
Reference: mp793d1xswi090zzfatl

Security Awareness and Culture Lead

Teddington, England, United Kingdom Permanent Training

Other similar jobs

Principal Enterprise Security Architect

Added 09/10/2026

We are seeking a Principal Enterprise Security Architect to define and advance the security architecture strategy across a complex, technology-led environment. This role will provide senior technical leadership, establish secure-by-design principles, and ensure that security is embedded across business capabilities, applications, infrastructure, data, cloud services, and emerging technologies. You will work closely with executive stakeholders, technology leaders, product teams, and risk specialists to translate business objectives into practical, scalable, and resilient security solutions. Key responsibilities include developing and maintaining enterprise security architecture standards, reference models, principles, and roadmaps; assessing current and proposed architectures for security, privacy, resilience, and regulatory alignment;...

Learn more

Security Adviser

Added 17/09/2026

We are seeking an experienced Security Adviser to provide practical, risk-based advice that supports the protection of people, information, property and operational activities. The successful candidate will assess security risks, identify vulnerabilities and recommend proportionate controls across physical, personnel, information and operational security environments. You will work with colleagues and stakeholders at all levels, helping to strengthen security awareness, promote consistent standards and ensure that appropriate procedures are understood and followed. Key responsibilities will include conducting security assessments, audits and site reviews; maintaining risk registers and security plans; developing and updating policies, procedures and guidance; and advising on access control,...

Learn more

Security Advisor

Added 17/09/2026

We are seeking a Security Advisor to provide trusted, practical advice that strengthens security across people, processes, technology and physical environments. In this role, you will work with stakeholders at different levels to identify risks, assess the effectiveness of existing controls and recommend proportionate improvements. You will contribute to a positive security culture by making complex issues clear, actionable and relevant to day-to-day operations. Your responsibilities will include conducting security assessments, supporting risk reviews, maintaining risk and issue registers, and advising on appropriate mitigation plans. You will help develop, review and implement security policies, standards, procedures and guidance, ensuring they...

Learn more

Security Culture and Awareness Manager (m/w/d)

Added 26/08/2026

As Security Culture and Awareness Manager (m/w/d), you will play a central role in strengthening security awareness and responsible behaviour across the organisation. You will develop and implement a forward-looking security culture strategy that supports employees in recognising risks, making informed decisions and integrating secure practices into their daily work. Working closely with Information Security, IT, Human Resources, Compliance, Legal and internal communications teams, you will ensure that security is understood as a shared responsibility at every level. Your responsibilities will include creating and managing engaging awareness campaigns, training programmes, workshops and communication formats for different audiences, from new starters...

Learn more

Security, Culture, Education & Awareness Team Lead

Added 18/09/2026

We are seeking a Security, Culture, Education & Awareness Team Lead to develop and deliver a comprehensive security culture and awareness programme across a complex organisation. This role will help strengthen security behaviours, improve understanding of risk, and ensure that colleagues at all levels are equipped to protect information, systems, people and services. You will lead a small team and work closely with security, technology, people, communications, risk and business teams to embed security into everyday decision-making. Your responsibilities will include creating and maintaining a strategic security education and awareness plan, informed by organisational priorities, emerging threats, regulatory expectations and...

Learn more

Security, Culture, Education & Awareness Practitioner

Added 15/09/2026

We are seeking a Security, Culture, Education & Awareness Practitioner to help strengthen security culture and improve awareness across a diverse workforce. You will support the development and delivery of engaging security education, awareness and behavioural change initiatives, helping colleagues understand their responsibilities and make informed, secure decisions in their day-to-day work. This role is suited to someone who can translate complex security concepts into clear, practical and accessible communications for a range of audiences. Your responsibilities will include creating and maintaining security awareness content, guidance, campaigns, learning materials and communications across multiple channels. You will coordinate activities such as...

Learn more

Embedded Security Education & Awareness Programme Consultant

Added 01/09/2026

We are seeking an Embedded Security Education & Awareness Programme Consultant to help strengthen security culture across a complex organisation. Working closely with business units, technology teams, risk specialists and senior stakeholders, you will design and deliver practical, engaging security education that supports secure behaviours and reduces organisational risk. This is an influential role for a confident communicator who can translate technical and regulatory requirements into clear, relevant guidance for a wide range of audiences. Your responsibilities will include assessing awareness needs, developing and maintaining an annual security education and engagement plan, and creating content for campaigns, workshops, onboarding, leadership...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Identity and Access Management Engineer (IDAM and Azure)

Added 21/09/2026

We are seeking an Identity and Access Management Engineer to support the design, implementation and continuous improvement of secure identity services across a modern cloud and hybrid technology environment. Working with security, infrastructure, application and service teams, you will help ensure that users, devices, applications and privileged accounts have appropriate access throughout their lifecycle. The role will focus heavily on Microsoft Azure and Entra ID, while also supporting wider identity and access management capabilities. Your responsibilities will include administering and enhancing Entra ID, Azure subscriptions, enterprise applications, single sign-on, multi-factor authentication, conditional access and identity governance controls. You will manage...

Learn more

Platform and Services Engineer - IAM (we have office locations in Cambridge, Leeds and London)

Added 18/09/2026

We are looking for a Platform and Services Engineer specialising in Identity and Access Management (IAM) to help design, operate and continuously improve secure, reliable identity services across a complex technology environment. This role can be based in Cambridge, Leeds or London, with flexible working arrangements available. You will work closely with infrastructure, security, application and service teams to ensure that users, systems and applications have the right access at the right time. Your responsibilities will include administering and developing IAM platforms, including authentication, authorisation, directory services, privileged access and identity lifecycle management. You will support joiner, mover and leaver...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Technology and Cyber Security Risk Audit Lead

Added 05/10/2026

We are seeking a Technology and Cyber Security Risk Audit Lead to provide independent assurance over the effectiveness of technology, information security and cyber risk management practices. This is a senior role for an experienced audit professional who can combine strong technical understanding with commercial awareness, sound judgement and the ability to influence stakeholders at all levels. You will help shape risk-based audit plans, identify emerging threats and provide practical recommendations that strengthen governance, resilience and regulatory compliance. Key responsibilities will include leading complex audits across areas such as cyber security, IT infrastructure, cloud services, identity and access management, data...

Learn more

Cyber Security and Digital Resilience Lead – KTP Associate

Added 25/09/2026

We are seeking a Cyber Security and Digital Resilience Lead – KTP Associate to develop and embed a robust, practical approach to cyber security, information governance and digital resilience. This is an opportunity for an ambitious cyber security professional to work on a high-impact knowledge transfer project, translating current research, industry standards and best practice into sustainable improvements across people, processes and technology. You will assess the existing cyber security posture, identify vulnerabilities and resilience gaps, and help design a clear roadmap for risk reduction and continuous improvement. Key responsibilities will include conducting cyber security and technology risk assessments; reviewing...

Learn more

SAP Security Architect and Team Lead

Added 22/09/2026

We are seeking an experienced SAP Security Architect and Team Lead to design, implement and govern secure SAP environments across a complex enterprise landscape. This role will provide architectural leadership for SAP security, identity and access management, ensuring that solutions support business needs while meeting internal controls, regulatory obligations and industry best practice. You will work closely with technology, risk, audit and business stakeholders to define security strategies, establish standards and drive continuous improvement across SAP platforms. Key responsibilities will include developing SAP security architecture and roadmaps; designing role concepts, authorisations and segregation-of-duties controls; overseeing user lifecycle management, privileged access...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.