Embedded Security Education & Awareness Programme Consultant

Control Risks; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

Control Risks is seeking a consultant to manage and evolve our Security Education & Awareness programme, protecting people, research, and intellectual property through training, communications, and engagement that drive security-conscious behaviour.

You will tailor content to each client’s unique research culture, lead with the why, and own end-to-end delivery across formats from video and e-learning to live onboarding, dashboards, and outreach.

Qualifications

• Proven track record managing security education and awareness programmes at scale in a technology or research organisation.
• Strong content creation skills across formats: video, e-learning, written communications, infographics, and audio.
• Broad corporate security expertise spanning insider risk, IP protection, travel and personal security, and event security.
• Ability to distil complex threats into clear, actionable guidance for non-security audiences.
• Credibility to present at all levels of the organisation, from new joiners to senior leadership.
• Autonomous owner of the programme, with collaboration with the wider security team.
• Comfort working with senior leadership, legal, communications, and people teams.
• Automation mindset—experience building workflows, dashboards, pipelines.
• Willingness to tailor training to client’s unique research culture by leading with the "why".

Responsibilities

• Own the annual security training cycle end-to-end, coordinating with an e-learning vendor to refresh content, manage rollout and tracking, and elevate non-compliance.
• Produce location-specific security briefings and short-form audio content for major conferences using threat intelligence inputs.
• Deliver monthly live onboarding sessions with interactive exercises and follow-up recordings and communications.
• Coordinate quarterly threat briefings for researchers and leadership forums with concise updates.
• Maintain and expand the client’s security portal with a library of bite-sized training content and best-practice guidance for AI research workflows.
• Produce regular security awareness content across internal channels to keep security top-of-mind between formal training cycles.

Job description

We are seeking a consultant to manage and evolve our clients Security Education & Awareness programme. The programme protects their people, research, and intellectual property by driving security-conscious behaviour across the organisation through training, communications, and engagement.

A critical success factor is understanding the clients unique research culture: their training and communications must be engaging, collaborative, and lead with "the why" — explaining the reasons behind our security controls without feeling bureaucratic, overly alarmist, or punitive.

Requirements

Core Responsibilities

• Mandatory Security Training. Own the annual training cycle end-to-end: coordinate with our e-learning production vendor to refresh video content and scenarios each year, manage rollout and completion tracking, build leadership dashboards, and elevate non-compliance.
• Conference & Travel Security. Produce location-specific security briefings and short-form audio content for major conferences, drawing on threat intelligence inputs and distributing through our events coordination channels.
• New Hire Security Onboarding. Deliver monthly live onboarding sessions, create interactive exercises and follow-up assessments, maintain on-demand recordings, and manage automated follow-up communications.
• Threat Briefings. Coordinate quarterly security briefings for high-profile researchers and secure recurring slots at leadership forums to deliver concise threat updates.
• Internal Security Portal. Maintain and expand the clients security resource hub with a library of bite-sized training content, threat updates, and best-practice guidance tailored to AI research workflows.
• Ongoing Communications & Engagement. Produce regular security awareness content across internal channels — newsletters, chat posts, short-form video — to keep security top-of-mind between formal training cycles.

Essential:

• Proven track record managing security education and awareness programmes at scale in a technology or research organisation
• Strong content creation skills across formats: video, e-learning, written communications, infographics, and audio
• Broad corporate security expertise spanning insider risk, IP protection, travel and personal security, and event security — with the ability to distil complex threats into clear, actionable guidance for non-security audiences
• Credibility and gravitas to present confidently at all levels of the organisation, from new joiners to senior leadership and high-profile researchers
• Comfortable operating as the sole owner of the programme — driving strategy, planning, and delivery autonomously while collaborating with the wider security team for subject-matter input and stakeholder support
• Comfort working with senior leadership, legal, communications, and people teams as key stakeholders
• An automation mindset - experience building workflows, dashboards, and pipelines to reduce manual overhead
• Willingness and ability to build an appreciation for the clients unique research culture — tailoring training and communications to lead with "the why".

Desirable:

• Experience in AI, machine learning, or frontier technology environments
• Background in threat intelligence, travel security, or nation-state threat awareness
• Experience building security champion or ambassador programmes
• Relevant professional certifications (SSAP, CISSP, or equivalent)