Information Security Officer - Governance

FBI &TMT; Fareham; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company in the security sector is seeking a subject matter expert in Security Governance, Training & Culture. This role involves leading the development of a global strategy, creating engaging training initiatives, and driving cultural change to foster secure behaviours across the organization.

Qualifications

• 5+ years of experience in security training, governance, and culture, ideally in retail or healthcare.
• Familiarity with compliance frameworks like NIS, DSPT, PCI DSS, Cyber Essentials.

Responsibilities

• Lead the design and execution of the global Information Security Governance, Training & Culture strategy.
• Develop training initiatives to meet regulatory and business requirements.
• Measure effectiveness through KPIs and compliance metrics.

Skills

Communication

Creativity

Behavioural Science Techniques

Understanding of Security Risks

Education

Relevant qualifications in security or learning & development

Job description

Your Purpose
As the subject matter expert in Security Governance, Training & Culture, you will lead the development, delivery, and continuous improvement of the global strategy in this space. You'll work across teams and with external partners to promote secure behaviours, drive cultural change, and build awareness using innovative tools and approaches. Your role is essential in shaping how colleagues across the organisation think and act securely in their day-to-day work.

Key Responsibilities

• Lead the design and execution of the global Information Security Governance, Training & Culture strategy.

• Develop engaging, inclusive training and awareness initiatives, meeting regulatory and business requirements.

• Implement innovative tools and techniques to enhance behavioural change and cultural engagement.

• Oversee security communications, phishing awareness campaigns, and community-building initiatives.

• Collaborate with stakeholders to maintain up-to-date policies, standards, and guidance.

• Measure effectiveness through KPIs, training needs analysis, and compliance metrics.

• Support security committees, report outcomes, and inform strategic improvements.

Key Skills & Experience

• Strong communicator with a creative approach to training and awareness campaigns.

• Proven experience (5+ years) in security training, governance, and culture, ideally in retail or healthcare.

• Solid understanding of human-related security risks and behavioural science techniques.

• Familiar with compliance frameworks (e.g., NIS, DSPT, PCI DSS, Cyber Essentials).

• Comfortable working across internal teams, global functions, and third-party providers.

• Relevant qualifications in security or learning & development are a plus.