Cyber Security Culture Consultant

Job Description

We’re searching for a Cyber Security Culture Consultant to join our Digital Trust and Cyber Security Team. As a member of our dynamic and forward-thinking group, you’ll have the chance to strengthen cyber security culture across a broad range of projects covering security awareness, user engagement and behaviour change. The role focuses on understanding how people currently interact with cyber security and designing practical interventions that embed secure behaviours into everyday ways of working.

You will have the opportunity to:

• Assess organisational security culture, identifying behavioural risks and control gaps to inform targeted improvement plans
• Design and deliver human-centric solutions to complex cyber security challenges, focusing on sustainable behaviour change
• Develop and tailor security awareness and culture strategies
• Create targeted campaigns and communications that are clear, measurable, engaging and audience appropriate
• Build trusted relationships with stakeholders at all levels to influence behaviours and embed security ownership
• Apply structured consulting, cyber security, and behaviour change methodologies to solve client challenges
• Support capability development through knowledge sharing, mentoring, and contributing to the growth of cyber culture offerings through bids and business development.

Flexible working – We are currently operating a discretionary hybrid working model which is designed to help you plan your work and your life. We want our people to come into the office at least two days a week.

Skills, experience and qualifications

• Proven track record of driving security culture transformation and embedding behaviour change across diverse organisations
• Strong understanding of cyber security risk and the human factors that influence secure behaviours
• Experience designing and delivering awareness, engagement, or behaviour change initiatives, with the ability to translate complex topics into plain English
• Excellent communication, facilitation, and presentation skills, with confidence engaging both technical and non-technical audiences
• Highly effective stakeholder engagement skills, with the ability to build trust and influence behaviours across all organisational levels
• Holistic understanding of cyber security across people, process, and technology
• Experience working within cross-functional teams to deliver cyber security or culture programmes
• Relevant cyber security qualifications or certifications, demonstrating a solid foundation in the field
• Up-to-date knowledge of emerging technologies, threat landscapes, and trends in cyber security and security culture

We’re committed to advancing equality. We recruit, retain, reward and develop our people based solely on their abilities and contributions and without reference to their age, background, disability, genetic information, parental or family status, religion or belief, race, ethnicity, nationality, sex, sexual orientation, gender identity (or expression), political belief, veteran status, or any other range of human difference brought about by identity and experience.

We welcome applications from underrepresented groups.

Adjustments or accommodations – Should you need any adjustments or accommodations to the recruitment process, at either application or interview, please contact us on [email protected]