Culture, Training and Awareness Principal - Information Security

Marks & Spencer; United Kingdom; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

A leading UK retailer is seeking a Cyber Security Culture, Training & Awareness Principal to enhance security awareness across all departments. This role involves developing and delivering training programs, fostering a security culture, and building a Security Champion Network within the company. Ideal candidates will have a degree in a related field and three years of relevant experience. The position offers a comprehensive benefits package including discounts, a pension scheme, and extensive training opportunities.

Benefits

20% colleague discount

Competitive holiday entitlement

Discretionary bonus schemes

Defined Contribution Pension Scheme

Wide range of training programmes

Access to wellbeing support

Charity volunteer day

Qualifications

• 3 years relevant experience in a similar environment and role.
• Proven experience of delivering cyber security training programs.
• Understanding of effective methodologies for measuring employee awareness.

Responsibilities

• Support the building of the security culture strategy.
• Cultivate and influence the security culture within M&S.
• Develop and measure cyber security training initiatives.

Skills

Cyber Security Brand Development

Security Awareness Training

Public Relations

Collaboration with Technical Teams

Education

Bachelor's degree in Marketing, Public Relations, Cyber Security, IT

Tools

SDLC methodology

Job description

Culture, Training and Awareness Principal - Information Security

United Kingdom

Job Description

We are seeking a skilled Cyber Security Culture, Training & Awareness Principal to support our efforts to enhance security awareness across all departments and business units. In this role, you will actively contribute to efforts for building and delivering the security culture training and awareness strategy to enhance cyber security awareness and engagement across the business.

We’re keen to foster a strong security culture by ensuring colleagues clearly understand their roles in protecting sensitive information and assets. This includes delivering a comprehensive strategy that goes beyond awareness—building a recognisable Cyber Security brand, rolling out engaging training programs tailored to different teams, creating impactful communication campaigns. A key focus of this position will be continuing with the development and rolling out of a Security Champion Network that spans all business units, with a dedicated sub-network embedded within D&T (Digital and Technology) teams. This network will be instrumental in driving peer-to-peer engagement, embedding best practices.

What you’ll do

• Proactively support the building and delivering of the security culture strategy to enhance awareness and engagement with InfoSec across M&S Globally.
• Cultivate and influence M&S security culture so that organisational, team and individual decisions result in positive outcomes and an understanding that cyber security is everyone’s responsibility.
• Support the development, implementation, and outcome measurement of comprehensive cyber security training and awareness programs and initiatives—tailored to different departments, teams, and business units.
• Continue with the building and implementation of a Security Champion network within D&T (Digital and Technology) and across the wider organisation.
• Understand the security culture, training and awareness objectives derived from the InfoSec management team and support the translation of these into concrete and measurable deliverables and outcomes.
• Enhance awareness of and engagement with the Cyber Security Brand throughout M&S. Contribute to the creation of branding materials, communication strategies, and campaigns aimed at reinforcing the importance of cyber security among colleagues and partners.

Who you are

• Bachelor's degree (advantageous if in Marketing, Public Relations, Cyber Security, Information Technology, or a related field).
• 3 years relevant experience in a similar environment and role
• Ability to provide security awareness support and guidance to colleagues within InfoSec and the broader M&S
• A clear understanding of the actions required to develop and promote a Cyber Security Brand.
• Experience of working within or alongside technical teams, with a solid understanding of secure-by-design principles and SDLC (Software Development Life Cycle) requirements.
• Proven experience of delivering cyber security training programs.
• Understanding / experience of deploying effective methodologies for measuring and assessing employee awareness levels.

What’s in it for you

Being a part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day. We’re an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special…

• After completing your probationary period, you’ll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

Everyone’s welcome

We’re ambitious about the future of retail. We’re innovating, disrupting, and leading the way into a more inspiring, digital era. It’s an exciting time to be part of M&S.

To support us on our journey, we’re building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.

Don’t worry if you don’t meet every single requirement of the job description. It’s more of a guide to what’s possible within the role. If you’re passionate, ready to work hard, and think the role feels right for you, we’d love to hear from you. #hybridrole #LI-Hybrid #LI-OT1

Job Info

• Job Identification 113739
• Job Category Technology
• Job Schedule Full time
• Locations Waterside House, London, W2 1NW, GB