Program Manager - Cybersecurity Awareness

Job Overview

We are seeking an experienced Program Manager to design, develop, and implement comprehensive cybersecurity awareness initiatives across our organization. The role involves managing phishing simulation campaigns, training modules, and engagement activities to cultivate a strong security-conscious culture.

Key Responsibilities

• Develop and roll out cybersecurity awareness programs organization-wide.
• Manage phishing simulation exercises and analyze user response data.
• Collaborate with cyber teams to identify and address training and awareness needs.
• Create role-specific cybersecurity educational content.
• Organize induction sessions for new hires within the cybersecurity function and across the group.
• Lead email-based awareness drives and social engineering campaigns.
• Monitor and report on effectiveness metrics for awareness initiatives.
• Conduct cyber crisis simulation exercises throughout the company.
• Plan and maintain an annual calendar of cybersecurity awareness activities.
• Produce engaging awareness materials, including emails, posters, and videos.
• Ensure regulatory compliance in training initiatives.
• Continuously assess and enhance the impact of training efforts.
• Coordinate with external vendors for phishing and awareness tool procurement and management.
• Organize events like Cybersecurity Month celebrations, workshops, and other related functions.
• Promote a culture of cybersecurity awareness among various business units.
• Provide mentorship to team members and support ongoing learning opportunities.
• Work closely with HR and Learning & Development teams to embed cybersecurity training in enterprise programs.
• Engage stakeholders and Business Unit Chief Information Security Officers (CISOs) to align awareness efforts.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related discipline.
• A minimum of 5 years' experience specializing in cybersecurity training and awareness.
• Practical expertise with phishing simulation software.
• Deep knowledge of cyber threats and social engineering tactics.
• Proven track record designing awareness campaigns and training curricula.
• Understanding of standards such as ISO 27001, NIST frameworks, and regulatory training mandates.
• Excellent communication abilities and stakeholder management skills.
• Certification as a Security Awareness Practitioner (CSAP) or equivalent qualifications focused on security awareness or human risk management.