Senior Security Awareness Strategist - ISO 27001 & Phishing

Rhox; Brussel; Sur place; EUR 100 000 - 179 000; Plein temps

Résumé du poste

Rhox is seeking a senior cybersecurity awareness specialist to review and improve its security awareness programme within an ISO 27001 aligned ISMS. Reporting to the CISO, you will assess current maturity and shape a practical, behaviour-based awareness plan including phishing simulations, training, and clear communication.

The assignment lasts about two months and involves interviewing HR, internal communications, ICT and business stakeholders, producing an assessment, renewed strategy, action

Qualifications

• Senior expertise in security awareness, behaviour change and communication strategies.
• Experience evaluating and redeveloping cybersecurity awareness strategies and programmes.
• Ability to benchmark practices against ISO 27001 Annex A, NIST SP 800-50/53 and ENISA guidance.
• Experience designing awareness campaigns, phishing simulations, training and communication content.
• Knowledge of phishing simulation and training platforms.
• Understanding of NIS 2 and GDPR awareness obligations.
• Clear, convincing communication with management, the CISO and end users.
• Autonomous delivery at SFIA level 5, Ensure, advise, during a short assignment.

Responsabilités

• Assess the existing cybersecurity awareness strategy, programmes and delivery resources.
• Benchmark awareness maturity against ISO 27001 Annex A, NIST and ENISA guidance.
• Conduct interviews and workshops with HR, internal communications, ICT and business stakeholders.
• Identify target audiences, risky behaviours and their security awareness needs.
• Develop a renewed strategy and practical improvement plan.
• Recommend campaigns, phishing simulations, training and communication activities.
• Present findings to the CISO and management, then transfer knowledge to CISO colleagues.

Connaissances

Security awareness

Behaviour change

Communication strategies

ISO 27001 Annex A benchmarking

NIST/ENISA guidance

Phishing simulations

Campaign design

Training content

End-user communications

SFIA level 5 delivery

Formation

Master’s degree or relevant experience

Outils

Phishing simulation platforms

Description du poste

Rhox is seeking a senior cybersecurity awareness specialist to review and improve its security awareness programme within an ISO 27001 aligned ISMS. Reporting to the CISO, you will assess current maturity and shape a practical, behaviour-based awareness plan including phishing simulations, training, and clear communication.

The assignment lasts about two months and involves interviewing HR, internal communications, ICT and business stakeholders, producing an assessment, renewed strategy, action