Cyber Human Factors Strategy Lead

Canopius; Manchester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Non-contributory pension

Discretionary bonus

Job summary

Canopius is seeking a Cyber Human Factors Manager to design and operate a framework that manages cyber risk arising from human behaviour and culture. You will lead the lifecycle management of Information Security policies and report metrics for leadership, including the CISO.

You will develop policies, deliver engaging training, run phishing simulations, and partner with Legal, Compliance, IT and HR to embed human-centric security across the organisation.

Qualifications

• Bachelor's degree in cybersecurity, psychology, human factors, or related field.
• Proven experience in cybersecurity, with a focus on human factors, behaviour analysis, or organizational psychology.
• In-depth knowledge of the NIST Cybersecurity Framework and other relevant industry standards.
• Strong understanding of human behaviour, cognition, and decision‑making processes in the context of cybersecurity.
• Experience developing and implementing cybersecurity policies and training programs.
• Proficiency in data analysis and the ability to derive insights from complex datasets.
• Excellent communication and interpersonal skills, with the ability to engage with stakeholders at all levels of the organization.
• Desirable to have relevant certifications such as CISSP, CISM, or CIPM.

Responsibilities

• Develop, maintain, and continuously improve policies related to human factors in cybersecurity, aligned to good practice (NIST).
• Design, implement, and manage cybersecurity training programmes for employees at all levels.
• Operate defensive phishing campaigns and human‑factors security testing activities.
• Coordinate with leaders to tailor training based on role risk profiles and business needs.
• Monitor training outcomes and improve methodologies based on feedback and threats.
• Define metrics to assess cyber behaviours and security culture.
• Produce dashboards and reports for leadership on trends and improvement actions.
• Collaborate with IT and Security teams to integrate behavioural metrics into risk assessments.

Skills

Cybersecurity expertise

Human factors understanding

Data analysis

Communication skills

Education

Bachelor in cybersecurity

Bachelor in psychology

Human factors degree

Job description

Canopius is seeking a Cyber Human Factors Manager to design and operate a framework that manages cyber risk arising from human behaviour and culture. You will lead the lifecycle management of Information Security policies and report metrics for leadership, including the CISO.

You will develop policies, deliver engaging training, run phishing simulations, and partner with Legal, Compliance, IT and HR to embed human-centric security across the organisation.