Job Search

Security & Awareness Manager (Contract)
Location: London (hybrid)
Duration: 6 months
Engagement: Inside IR35

Overview
An experienced Security & Awareness Manager is required to lead the development and execution of a security awareness and culture programme across a complex enterprise environment. This role will play a critical part in strengthening the organisation's human risk posture and embedding secure behaviours.

Key Responsibilities
* Design, implement and continuously improve a security awareness strategy and roadmap aligned to organisational risk and regulatory requirements
* Deliver engaging security awareness campaigns, including phishing simulations, training programmes, and targeted interventions
* Collaborate with security, risk, HR and communications teams to embed security-first behaviours across the business
* Measure programme effectiveness using KPIs, metrics and behavioural analytics
* Lead initiatives to address human-related cyber risks (e.g. phishing, social engineering, insider threat)
* Develop executive-level reporting on awareness outcomes and risk reduction
* Ensure alignment with frameworks such as NIST, ISO 27001 and NIS2 (where applicable)
* Manage third-party vendors delivering awareness platforms or services

Key Requirements
* Proven experience in security awareness, behaviour change, or human risk management
* Strong understanding of cyber security principles and threat landscape
* Experience designing enterprise-wide awareness programmes
* Ability to engage stakeholders from operational teams through to senior leadership
* Familiarity with training platforms, phishing simulation tools, and awareness metrics
* Strong communication and storytelling skills

Desirable
* Experience in regulated or critical infrastructure environments
* Certifications such as CISSP, CISM, or SANS security awareness credentials

GCS is acting as an Employment Business in relation to this vacancy.