Security & Awareness Manager (Contract)

Security & Awareness Manager (Contract)

Location: London (hybrid)

Duration: 6 months

Engagement: Inside IR35

Overview

An experienced Security & Awareness Manager is required to lead the development and execution of a security awareness and culture programme across a complex enterprise environment. This role will play a critical part in strengthening the organisation’s human risk posture and embedding secure behaviours.

Key Responsibilities

• Design, implement and continuously improve a security awareness strategy and roadmap aligned to organisational risk and regulatory requirements
• Deliver engaging security awareness campaigns, including phishing simulations, training programmes, and targeted interventions
• Collaborate with security, risk, HR and communications teams to embed security-first behaviours across the business
• Measure programme effectiveness using KPIs, metrics and behavioural analytics
• Lead initiatives to address human-related cyber risks (e.g. phishing, social engineering, insider threat)
• Develop executive-level reporting on awareness outcomes and risk reduction
• Ensure alignment with frameworks such as NIST, ISO 27001 and NIS2 (where applicable)
• Manage third-party vendors delivering awareness platforms or services

Key Requirements

• Proven experience in security awareness, behaviour change, or human risk management
• Strong understanding of cyber security principles and threat landscape
• Experience designing enterprise-wide awareness programmes
• Ability to engage stakeholders from operational teams through to senior leadership
• Familiarity with training platforms, phishing simulation tools, and awareness metrics
• Strong communication and storytelling skills

Desirable

• Experience in regulated or critical infrastructure environments
• Certifications such as CISSP, CISM, or SANS security awareness credentials

GCS is acting as an Employment Business in relation to this vacancy.

#J-18808-Ljbffr…