Security Culture and Awareness Manager

Arcus Search; Manchester; Hybrid; GBP 80,000 - 95,000; Full time

Job summary

A leading organisation is seeking a highly experienced Security Culture and Awareness Manager to join its cyber security team in Manchester. This role involves shaping and leading the development of IT and cyber security policies and promotes a strong security culture. Candidates should have at least 5 years of experience in cyber governance and familiarity with frameworks like NIST and ISO 27001. A competitive salary of up to £95,000 is offered along with excellent benefits.

Benefits

Discretionary bonus

Excellent benefits package

Qualifications

• 5+ years’ experience in cyber governance, cyber assurance, policy development, or IT compliance.
• Strong knowledge of cyber security frameworks such as NIST and ISO 27001.
• Understanding of regulatory and compliance standards including GDPR, PCI-DSS, and ITGC.

Responsibilities

• Lead the design, implementation, and governance of IT and cyber security policy frameworks.
• Develop and manage a global policy governance structure.
• Promote cyber awareness initiatives across the organisation.

Skills

Stakeholder management

Reporting skills

Communication skills

Tools

AWS

Azure

GCP

Job description

Job Title:Security Culture and Awareness ManagerLocation:Manchester (3 days per week onsite)Salary:Up to £95,000 + discretionary bonus & excellent benefitsEmployment Type:Full-time, Permanent (applicants must be UK based and NOT require sponsorship)About the Role:A leading organisation is seeking a highly experienced and strategic Security Culture and Awareness Manager to join its cyber security team. This is a fantastic opportunity to shape and lead the development, governance, and awareness of IT and cyber security policies across a large and complex organisation.As the Global Cyber Policy and Governance Lead, you will be responsible for aligning cyber controls with business strategy, enhancing policy frameworks, ensuring compliance with international standards and regulations, and providing leadership-level reporting and insight.Key Responsibilities:

• Lead the design, implementation, and governance of IT and cyber security policy frameworks.
• Develop and manage a global policy governance structure that aligns with industry best practices and internal strategy.
• Ensure cyber policies remain current, effective, and aligned with evolving technologies, threats, and compliance requirements.
• Promote cyber awareness initiatives across the organisation to embed a strong security culture.
• Monitor and report on policy adherence, risks, and mitigation plans to senior stakeholders.
• Collaborate with key internal and external stakeholders to ensure a consistent and integrated approach to cyber policy and governance.
• Identify opportunities for policy automation and toolset enhancements.

Key Experience & Qualifications:

• 5+ years’ experience in cyber governance, cyber assurance, policy development, or IT compliance.
• Strong knowledge of cyber security frameworks such as NIST and ISO 27001.
• Understanding of regulatory and compliance standards including GDPR, PCI-DSS, and ITGC.
• Hands-on experience with cloud platforms including AWS, Azure, or GCP.
• Relevant certifications such as CISSP, CISM, or CRISC are preferred but not essential.
• Excellent stakeholder management, reporting, and communication skills.

What’s on Offer:

• A competitive salary up to £95,000
• Discretionary bonus
• Excellent benefits package
• The chance to join a well-established and recognised organisation at the forefront of cyber governance