Security Specialist (GRC & Awareness

Position: Security Specialist (GRC & Awareness)
Kforce's client is seeking a Security Specialist to join their team in Saint Louis, MO. This is a six-month contract opportunity with the potential to extend or convert based on performance and business needs.

Summary:

This role will lead cybersecurity awareness and training initiatives across a complex enterprise environment. The ideal candidate will be responsible for developing, delivering, and continuously improving security awareness programs that strengthen security culture, reduce human risk, and support regulatory compliance.

Responsibilities:

* Lead and execute enterprise-wide cybersecurity awareness and training programs

* Develop and deliver security training focused on phishing, social engineering, data protection, and other cyber risks

* Manage phishing simulation campaigns, including planning, execution, reporting, and follow-up education

* Create and maintain engaging training content for technical and non-technical audiences

* Partner with Legal, Compliance, Privacy, HR, and Security teams to ensure training aligns with policies and regulatory requirements

* Track program effectiveness through training metrics, phishing results, and user behavior trends

* Prepare reporting and insights for leadership and key stakeholders

* Support audits, regulatory reviews, and compliance initiatives

* Promote a strong security culture through awareness campaigns and employee engagement efforts

* Serve as a trusted advisor on cybersecurity awareness best practices
* 5+ years of experience in cybersecurity awareness, training, GRC, or related security functions

* Experience developing and delivering cybersecurity training programs in a regulated or complex organization

* Strong understanding of cybersecurity threats, security awareness best practices, and user behavior risks

* Experience partnering with Compliance, Privacy, Legal, or Audit teams

* Excellent written, verbal, and presentation skills

* Ability to communicate technical concepts to non-technical audiences

* Strong organizational skills with the ability to manage multiple initiatives simultaneously

Preferred Qualifications:

* Security certifications such as CISSP, CISM, Security+, or similar credentials

* Experience with in financial services, healthcare, or other highly regulated industries

* Familiarity with regulatory and cybersecurity frameworks such as NIST CSF, GLBA, or NYDFS

* Experience administering phishing simulation platforms and security awareness tools