Information Security Awareness Lead

Unipharmedtech; Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

Uniphar is seeking an Information Security Awareness Lead to own and drive the security awareness programme across regions, delivering training, phishing simulations, and campaigns with HR, IT, and Communications. You will manage the Proofpoint Security Awareness Platform, run monthly inductions, and develop role‑specific training for high‑risk functions.

You will also lead the organization’s security awareness initiatives, including the October Security Awareness Month, and provide analytics to

Qualifications

• Minimum of 5 years’ experience in IT, Information Security, learning development or related role.
• Proven experience delivering security awareness, training, or behavioural risk programmes.
• Strong understanding of phishing, social engineering, and human-centric cyber risks.
• Experience managing awareness platforms and learning delivery tools.
• Strong communication and presentation skills.

Responsibilities

• Own and manage the organisation’s security awareness training programme, including quarterly training for all employees.
• Manage the security awareness roadmap and annual campaign calendar across regions.
• Administer the Proofpoint Security Awareness Platform including training modules, phishing simulations, reporting.
• Deliver monthly security awareness induction training for new starters.
• Run role-specific awareness sessions for IT, Finance, HR, and high‑risk roles.
• Lead awareness campaigns and webinars, quizzes, and surveys to boost engagement.
• Produce metrics and reports on training completion, reach, and phishing results.

Skills

Security awareness

Phishing testing

Learning delivery

Communication skills

Stakeholder engagement

Platform management

Analytical skills

Training development

Tools

Proofpoint

PhishAlarm

Workday

HRIS

Job description

Locations: Citywest, Dublin, Ireland or Stockley Park, Uxbridge, UKThe Role:The Information Security Awareness Lead will own and drive Uniphar’s security awareness programme, helping reduce human-related cyber risk through engaging training, phishing simulations, communications campaigns, and behavioural testing. The role will work with Information Security, IT, HR, Communications, and business teams to deliver effective awareness initiatives, track programme performance, and continuously improve security behaviours across all regions and divisions.Key Responsibilities:Security Awareness Programme ManagementManage all aspects of the organisation’s security awareness training programme, including mandatory quarterly training for all employees.Own the security awareness roadmap and annual campaign calendar, ensuring coverage of key risks and regulatory expectations.Ensure awareness programme coverage across divisional and regional locations, including coordination of local delivery and site visits.Manage and administer the Proofpoint Security Awareness Platform, including:Training modulesPhishing simulationsReporting and metricsWork with HRIS teams to deliver quarterly and ad‑hoc security training through Workday.Respond to and manage reported phishing emails via PhishAlarm, ensuring appropriate handling and feedback to users.Deliver monthly security awareness induction training for all new starters.Run regular awareness webinars, lunch‑and‑learn sessions, and other in‑person and virtual briefings.Select, deploy, and deliver role‑specific training for specialist job functions such as IT, Finance, HR, and other high‑risk roles.Run role‑specific awareness sessions, highlighting risks and attack scenarios relevant to specific job functions.Propose, design, and implement novel awareness initiatives (e.g. competitions, quizzes, games) to improve engagement and effectiveness. Phishing & Human Risk TestingOwn and manage the phishing testing programme, including:Regular phishing simulationsAnalysis of results and trendsTargeted follow‑up training for repeat failuresEscalate risky user behaviour and repeat failures to line management in line with agreed processes.Work with SecOps and Incident Response teams to incorporate real‑world attack patterns into testing and training.Set up and manage restrictions on access to Uniphar resources for persistent failures Physical & Behavioural Security AuditsConduct physical USB testing (e.g. trojan USB drops) to assess user behaviour.Perform clean desk audits across office locations.Conduct unattended workstation locking audits and report findings.Use audit outcomes to inform targeted awareness campaigns and improvements. Awareness Communications & CampaignsManage the Cybersecurity Intranet site, publishing regular security awareness updates and guidance.Design, procure, and distribute physical and digital awareness media, including:PostersStickersDigital signageDeliver regular themed security awareness campaigns across all channels (physical media, desktop messaging, training modules).Lead the organisation’s October Security Awareness Month, including:Campaign planningTrainingQuizzes, games, and surveysEngagement reporting Metrics, KPIs & Continuous ImprovementProduce regular metrics and reporting on:Training completion ratesProgramme reachPhishing simulation resultsEngagement and effectivenessMeet and report against defined KPIs for programme effectiveness.Conduct user surveys to gather feedback and measure awareness maturity.Incorporate survey results, metrics, and incident data into continuous programme improvements. Collaboration & Stakeholder EngagementWork closely with IT and SecOps to maximise delivery of security awareness messaging to end users, including:System notificationsPop‑ups and warningsDesktop backgrounds and bannersCoordinate with divisional IT and communications teams to localise awareness delivery.Carry out divisional and regional site visits to distribute materials and deliver local workshops.Skills & ExperienceEssentialMinimum of 5 years’ experience in IT, Information Security, learning development or related roleProven experience delivering security awareness, training, or behavioural risk programmes.Strong understanding of phishing, social engineering, and human‑centric cyber risks.Experience managing awareness platforms and learning delivery tools.Strong communication and presentation skills.Ability to engage effectively with both technical and non‑technical audiences.Please note that Uniphar is an equal-opportunity employer; we do not discriminate and welcome all responses. #uniphargroup