Security Awareness & Human Risk Leader - Remote

HealthEquity; United States; Remote; USD 121,000 - 157,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

401(k) match

Education and training benefits

Job summary

HealthEquity is seeking a Senior Manager of Security Awareness & GRC to lead enterprise human risk management and security culture strategies. You will turn complex cybersecurity topics into engaging, behavior-focused programs aligning with leadership and regulatory expectations.

You will own strategy, execution, and metrics for awareness programs, phishing simulations, and onboarding, coordinating with Security, GRC, Privacy, Legal, HR, Marketing, IT, and executives.

Qualifications

• Proven experience leading enterprise security awareness, human risk management, or security culture programs in a regulated environment.
• Strong ability to translate technical, regulatory, and risk concepts into clear business communications.
• Experience designing behavior-focused campaigns, executive communications, training programs, newsletters, videos, intranet content, and engagement strategies.
• Experience using phishing simulation data, training metrics, reporting trends, and engagement insights to measure program effectiveness.
• Ability to operate independently, prioritize competing requests, and drive large-scale programs with limited resources.

Responsibilities

• Drive continuous improvement of security governance, risk management, and compliance practices.
• Lead enterprise security awareness and human risk strategy aligned with education and culture priorities.
• Design, launch, and improve campaigns driving measurable behavior change, including phishing awareness and AI governance education.
• Oversee development of awareness campaigns: themes, visuals, messaging, materials, and teammate experiences.
• Own phishing simulations, targeted learning, and reinforcement messaging to encourage safe reporting and decisions.
• Collaborate with internal partners to develop and maintain educational materials and signals for different audiences.

Skills

Storytelling

Change management

Stakeholder communication

Security awareness programs

Behavioral science understanding

Education

Bachelor’s Degree in security/IT/related field

CompTIA CYSA or comparable certification

Tools

Office 365 (Word, PowerPoint, Excel)

Job description

HealthEquity is seeking a Senior Manager of Security Awareness & GRC to lead enterprise human risk management and security culture strategies. You will turn complex cybersecurity topics into engaging, behavior-focused programs aligning with leadership and regulatory expectations.

You will own strategy, execution, and metrics for awareness programs, phishing simulations, and onboarding, coordinating with Security, GRC, Privacy, Legal, HR, Marketing, IT, and executives.