Security Culture & Client Expert – Cybersecurity

Gazelle Global; Amsterdam; Hybrid; EUR 56,000 - 84,000; Part time

Job summary

Gazelle Global is seeking an experienced Security Culture & Behavioural Change Expert to strengthen cybersecurity awareness within a large financial services organisation.

You will work with senior management, IT security and client-facing teams to promote secure behaviours, manage projects end-to-end and deliver engaging awareness initiatives. This is a hands-on role with pragmatic, measurable outcomes.

Qualifications

• Experience in cybersecurity awareness, security culture, behavioural change, organisational psychology, or related field.
• Strong understanding of cybersecurity risks and human behaviour.
• Proven experience managing projects independently from concept through delivery.
• Experience developing awareness campaigns or educational programs.
• Strong research/analytical skills.
• Excellent stakeholder management with senior leadership.
• Strong presentation and facilitation skills.
• Ability to communicate complex topics to non-technical audiences.
• Proactive, creative, hands-on approach.
• Balance strategic thinking with practical implementation.
• Fluent Dutch and English is essential.

Responsibilities

• Research opportunities to strengthen security awareness and culture across management, internal teams and customer-facing environments.
• Design practical cybersecurity interventions that encourage positive behavioural change.
• Promote secure working practices including identity verification and early incident reporting.
• Develop initiatives to encourage positive leadership role modelling.
• Apply behavioural insights to secure improvements.
• Create psychologically safe environments for reporting concerns.
• Develop and deliver engaging security awareness campaigns and materials.
• Design initiatives for emerging cybersecurity risks including AI threats.
• Support security culture interventions aligned with ECB requirements.
• Translate complex cybersecurity topics into accessible guidance.
• Collaborate with internal teams to ensure relevance.
• Manage culture and awareness projects from research to evaluation.
• Engage with senior stakeholders and IT security teams.
• Coordinate multiple workstreams with timelines and deliverables.
• Present findings and progress to stakeholders.
• Measure effectiveness and suggest improvements.
• Coordinate and support cybersecurity events program.
• Take ownership of Team Security Moments initiative.
• Review and improve Team Security Moments and content.
• Promote awareness across departments.
• Lead Cybersecurity Month 2027.
• Develop presentations, videos, workshops and exercises.

Skills

cybersecurity awareness

security culture

behavioural change

organisational psychology

learning & development

stakeholder management

project management

communication skills

presentation skills

Dutch language

English language

Job description

Location: Amstelveen, Netherlands

Start Date: 2 November 2026 / As soon as possible

End Date: 31 October 2027

Hours: 36 hours per week

Working Arrangement: Hybrid - Tuesday and Thursday onsite

Languages: Fluent Dutch and English (mandatory)

Contract Type: Contract / Freelance (ZZP permitted)

Duration: 12 months

About the Role

We are looking for an experienced and hands‑on Security Culture & Client Expert to help strengthen cybersecurity awareness, security culture and behavioural resilience within a large financial services organisation.

As cyber threats continue to evolve, particularly with the rise of AI‑enabled attacks, organisations must ensure that employees, management and customers are equipped to recognise risks and respond appropriately.

This role focuses on the human side of cybersecurity, combining behavioural change, cybersecurity awareness, stakeholder engagement and project management to develop practical initiatives that encourage secure behaviours.

You will work closely with senior management, IT security teams, client‑facing departments and other business stakeholders to create a positive security culture where employees feel confident identifying, reporting and responding to potential threats.

This is a hands‑on position requiring someone who can independently research, design, coordinate and deliver security awareness initiatives from concept through execution and evaluation.

Key Responsibilities

Security Culture & Behavioural Change

• Research and identify opportunities to strengthen security awareness and culture across management, internal teams and customer‑facing environments.
• Design and implement practical cybersecurity interventions that encourage positive behavioural change.
• Promote secure working practices, including identity verification, early incident reporting and proactive risk awareness.
• Develop initiatives that encourage positive role modelling by managers and senior leadership.
• Apply behavioural insights and organisational psychology principles to support sustainable security improvements.
• Create psychologically safe environments where employees feel comfortable reporting security concerns.

Cybersecurity Awareness & Education

• Develop and deliver engaging security awareness campaigns, educational materials and interactive interventions.
• Design initiatives addressing emerging cybersecurity risks, including AI‑enabled cyber threats.
• Support the delivery of security culture interventions aligned with relevant regulatory expectations, including ECB requirements.
• Translate complex cybersecurity topics into accessible, practical guidance for technical and non‑technical audiences.
• Collaborate with internal teams to ensure security awareness initiatives are relevant to their daily activities.

Project Management & Stakeholder Engagement

• Manage cybersecurity culture and awareness projects from initial research and planning through implementation and evaluation.
• Engage with senior stakeholders, IT security specialists, business teams and client‑facing departments.
• Coordinate multiple workstreams, ensuring agreed objectives, timelines and deliverables are achieved.
• Present research findings, recommendations and project progress to relevant stakeholders.
• Measure and evaluate the effectiveness of security awareness initiatives and recommend improvements.

Events & Security Engagement

• Coordinate and support the organisation's cybersecurity events programme.
• Take ownership of Team Security Moments (TSM) initiative, designed to embed cybersecurity into employees' everyday working habits.
• Review and improve existing Team Security Moments and develop new content and activities.
• Promote awareness initiatives across departments to increase engagement and participation.
• Lead the planning, coordination and delivery of Cybersecurity Month in October 2027.
• Support the development of engaging presentations, videos, workshops and interactive security exercises.

Required Skills & Experience

• Previous experience in cybersecurity awareness, security culture, behavioural change, organisational psychology, learning & development, or a closely related field.
• Strong understanding of cybersecurity risks and the importance of human behaviour in preventing security incidents.
• Proven experience managing projects independently from concept through successful delivery.
• Experience developing and delivering awareness campaigns, behavioural interventions, training initiatives or educational programmes.
• Strong research and analytical skills, with the ability to translate findings into measurable improvements.
• Excellent stakeholder management skills, including experience engaging senior leadership and cross‑functional teams.
• Strong presentation, communication and facilitation skills.
• Ability to communicate complex technical or security‑related information to non‑technical audiences.
• Proactive, creative and hands‑on approach to problem‑solving and project delivery.
• Ability to balance strategic thinking with practical implementation.
• Professional fluency in Dutch and English is essential.

Desirable Skills

• Previous experience within banking, financial services or another regulated environment.
• Knowledge of cybersecurity awareness frameworks and security culture measurement.
• Familiarity with AI‑related cybersecurity threats and associated behavioural risks.
• Experience applying behavioural science or organisational psychology to security initiatives.
• Understanding of ECB regulatory expectations relating to cybersecurity awareness and organisational resilience.
• Experience organising cybersecurity events, awareness months or internal engagement campaigns.
• Video creation, editing or multimedia content development skills.

What Makes This Role Interesting?

• Opportunity to influence cybersecurity behaviour across a large, complex organisation.
• Work directly with security leadership, business stakeholders and customer‑facing teams.
• Combine cybersecurity expertise with psychology, communication and creative engagement.
• Take ownership of security culture initiatives with visible business impact.
• Lead major engagement activities, including Cybersecurity Month 2027.
• Join a dedicated Security Culture & Transformation team within the wider CISO organisation.

Ideal Candidate Profile

The ideal candidate is a Cybersecurity Awareness Specialist, Security Culture Consultant, Security Behaviour Change Specialist or Security Learning & Development Professional who enjoys translating cybersecurity challenges into practical, people‑focused solutions.

You are not purely a technical cybersecurity engineer. Instead, you understand the human factors behind cyber risk and have experience influencing behaviour through effective communication, training, research and engagement.

You are comfortable working independently, managing senior stakeholders and delivering initiatives that create meaningful, lasting improvements in security culture.