Program Consultant – Cyber Security Awareness and Governance

Job Summary The Program Consultant is responsible for managing and enhancing the organization's cybersecurity awareness program, ensuring effective delivery of security awareness content, governance oversight, process management, and delivery of security awareness platforms. The role combines program management, stakeholder engagement, governance, reporting, content and platform delivery, and continuous improvement to build a strong security-conscious culture across the organization. This role would be for one of our prestigious customers. Key Responsibilities Cyber Security Awareness Program Management • Lead the planning, execution, and continuous improvement of the Cyber Security Awareness Program. • Develop annual awareness roadmaps, campaign calendars, and strategic initiatives aligned with organizational security objectives. • Manage end-to-end awareness activities, including phishing simulations, awareness campaigns, workshops, webinars, and training programs. • Measure program effectiveness through defined KPIs, metrics • Coordinate with Information Security, Risk, Compliance, HR, Communications, and business stakeholders to drive awareness initiatives. Security Awareness Governance & Process Management • Establish and maintain governance frameworks, policies, standards, and procedures related to security awareness and culture. • Ensure compliance with organizational, regulatory, and industry security awareness requirements. • Define program operating models, RACI matrices, reporting structures, and governance forums. • Conduct periodic reviews of awareness controls, processes, and effectiveness. • Support audit, risk assessment, and compliance activities related to security awareness programs. Security Awareness Content Delivery • Manage and review security awareness content delivery covering topics from IT and OT. • Coordinate content localization and targeted campaigns for different business units and user groups. • Deliver awareness presentations, workshops, executive briefings, and employee training sessions. • Ensure content remains current, engaging, and aligned with evolving threat landscapes. Security Awareness Platform Management • Oversee the deployment and execution of activities related to Security Awareness & Simulation Platform such as awareness campaigns, phishing simulations, user groups, reporting dashboards, and automation workflows. • Monitor platform performance, user participation, and campaign effectiveness. • Manage platform vendors and support platform upgrades and enhancements. • Ensure integration of awareness platforms with enterprise systems where applicable. Reporting and Analytics • Present awareness dashboards and executive reports to management. • Analyze campaign results, employee engagement, training completion, and phishing simulation performance. • Present findings and recommendations to security leadership and governance committees. • Track key performance indicators (KPIs) for awareness maturity. Stakeholder Engagement • Act as the primary point of contact for Cyber Security Awareness initiatives. • Collaborate with business units to address awareness gaps and improve security culture. • Facilitate governance meetings and provide regular program updates to management. • Support change management and communication strategies for awareness initiatives. Qualifications • Bachelor’s degree in information security, Cyber Security, Information Technology, Computer Science, Business Management, or a related field. • Relevant certifications are preferred: • CISSP • CISM • Security+ • SANS Security Awareness Professional (SSAP) • ISO 27001 Lead Implementer/Auditor • PMP, PRINCE2, or equivalent project/program management certification Experience • 5+ years of experience in Cyber Security, Information Security Governance, Security Awareness, or Risk Management. • Experience managing enterprise-wide security awareness programs. • Experience with security awareness platforms and phishing simulation tools. • Strong governance, process management, and stakeholder management experience. • Experience in developing and delivering awareness training and communication campaigns.

Bachelor’s degree in information security, Cyber Security, Information Technology, Computer Science, Business Management, or a related field. Relevant certifications are preferred: CISSP, CISM, Security+, SANS Security Awareness Professional (SSAP), ISO 27001 Lead Implementer/Auditor, PMP, PRINCE2, or equivalent project/program management certification. 5+ years of experience in Cyber Security, Information Security Governance, Security Awareness, or Risk Management. Experience managing enterprise-wide security awareness programs. Experience with security awareness platforms and phishing simulation tools. Strong governance, process management, and stakeholder management experience. Experience in developing and delivering awareness training and communication campaigns.

Lead the planning, execution, and continuous improvement of the Cyber Security Awareness Program. Develop annual awareness roadmaps, campaign calendars, and strategic initiatives aligned with organizational security objectives. Manage end-to-end awareness activities, including phishing simulations, awareness campaigns, workshops, webinars, and training programs. Measure program effectiveness through defined KPIs, metrics. Coordinate with Information Security, Risk, Compliance, HR, Communications, and business stakeholders to drive awareness initiatives. Establish and maintain governance frameworks, policies, standards, and procedures related to security awareness and culture. Ensure compliance with organizational, regulatory, and industry security awareness requirements. Define program operating models, RACI matrices, reporting structures, and governance forums. Conduct periodic reviews of awareness controls, processes, and effectiveness. Support audit, risk assessment, and compliance activities related to security awareness programs. Manage and review security awareness content delivery covering topics from IT and OT. Coordinate content localization and targeted campaigns for different business units and user groups. Deliver awareness presentations, workshops, executive briefings, and employee training sessions. Ensure content remains current, engaging, and aligned with evolving threat landscapes. Oversee the deployment and execution of activities related to Security Awareness & Simulation Platform such as awareness campaigns, phishing simulations, user groups, reporting dashboards, and automation workflows. Monitor platform performance, user participation, and campaign effectiveness. Manage platform vendors and support platform upgrades and enhancements. Ensure integration of awareness platforms with enterprise systems where applicable. Present awareness dashboards and executive reports to management. Analyze campaign results, employee engagement, training completion, and phishing simulation performance. Present findings and recommendations to security leadership and governance committees. Track key performance indicators (KPIs) for awareness maturity. Act as the primary point of contact for Cyber Security Awareness initiatives. Collaborate with business units to address awareness gaps and improve security culture. Facilitate governance meetings and provide regular program updates to management. Support change management and communication strategies for awareness initiatives.