Hybrid Security Culture & Awareness Lead

National Physical Laboratory (NPL); Teddington; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

National Physical Laboratory (NPL) is seeking a Security Culture Lead to shape and embed a strong security mindset across cyber, physical and people risk. You will design programmes, campaigns, and communications that reduce human-related risk while aligning with regulatory and customer requirements.

You will collaborate with People Team, IT and Assurance to measure impact, deliver training, and drive behavioural change, ensuring readiness for BPSS/SC clearance and hybrid work across the site in

Qualifications

• Proven experience developing and delivering security awareness and culture programmes within a complex organisation.
• Experience working within or closely with Government, defence, or other highly regulated environments.
• Strong understanding of cyber security principles, physical security, and human risk factors.
• Knowledge of behavioural science or change management methodologies to influence organisational behaviour.
• Excellent communication skills with the ability to translate technical security concepts into clear messages for diverse audiences.
• Experience in stakeholder engagement across multiple business functions.
• Ability to design and measure metrics for cultural change and training effectiveness.
• Project management skills to plan, execute, and evaluate initiatives on time and within budget.
• Professional certifications such as CISSP, CISM, or SANS Security Awareness Professional.
• Background in communications, psychology, or organisational development.

Responsibilities

• Develop and implement a security culture strategy aligned with NPL values, business objectives, and security risk priorities.
• Champion a security-first mindset by leading initiatives, campaigns, and communications that make security relatable and actionable.
• Design and deliver continuous security awareness programmes, including e-learning, workshops, campaigns, and executive briefings.
• Identify gaps in security knowledge and develop targeted interventions to address these risks effectively.
• Tailor training and awareness activities for different roles and risk profiles across the organisation.
• Create and track metrics to measure effectiveness of initiatives and drive positive behavioural change.
• Collaborate with corporate functions and major programmes to align messaging and priorities.
• Act as a trusted advisor on embedding security into processes and culture.
• Provide subject matter expertise on human risk management, social engineering awareness, and behavioural change.
• Stay informed on best practices in security culture development and learning methodologies.

Skills

Security awareness programs

Stakeholder engagement

Change management

Excellent communication

Project management

Education

Communications/psychology/organisational development background

Tools

Security certifications (CISSP, CISM, SANS)

Job description

National Physical Laboratory (NPL) is seeking a Security Culture Lead to shape and embed a strong security mindset across cyber, physical and people risk. You will design programmes, campaigns, and communications that reduce human-related risk while aligning with regulatory and customer requirements.

You will collaborate with People Team, IT and Assurance to measure impact, deliver training, and drive behavioural change, ensuring readiness for BPSS/SC clearance and hybrid work across the site in