Program Consultant - Cyber Security Awareness and Governance

About the role

The Program Consultant manages and enhances the organization's cybersecurity awareness program, combining program management, stakeholder engagement, governance, reporting, content and platform delivery, and continuous improvement. The role builds a strong security-conscious culture across the organization and is intended for one of the company's prestigious customers.

Key responsibilities

• Lead the planning, execution and continuous improvement of the Cyber Security Awareness Program, including annual roadmaps, campaign calendars and initiatives aligned with security objectives
• Manage end-to-end activities such as phishing simulations, campaigns, workshops, webinars and training, measured by KPIs and metrics
• Work with Information Security, Risk, Compliance, HR, Communications and business stakeholders
• Set up governance frameworks, policies, standards and procedures, operating models, RACI matrices and reporting structures; ensure compliance with regulatory and industry requirements
• Support audits, risk assessments and compliance activities related to awareness programs
• Manage and review security awareness content, including IT and OT topics, and coordinate localized campaigns for different business units
• Deliver presentations, workshops, executive briefings and training sessions
• Oversee the Security Awareness & Simulation Platform, including phishing simulations, dashboards and automation, and manage platform vendors and upgrades
• Present dashboards and executive reports, analyze campaign results and phishing simulation performance, and track awareness maturity KPIs
• Act as the main point of contact for awareness initiatives, run governance meetings and support change management and communication strategies

Required profile

• Bachelor's degree in information security, cyber security, IT, computer science, business management or a related field
• 5+ years of experience in cyber security, information security governance, security awareness or risk management
• Experience managing enterprise-wide security awareness programs and with security awareness platforms and phishing simulation tools
• Strong governance, process management and stakeholder management experience
• Experience developing and delivering awareness training and communication campaigns
• Certifications preferred: CISSP, CISM, Security+, SANS SSAP, ISO 27001 Lead Implementer/Auditor, PMP or PRINCE2