Security Awareness Specialist - Employee Training Programs

The Elite Job; De Pere (WI); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Remote/hybrid work opportunities

Professional development

Certification prep

Learning resources

Job summary

The Elite Job is seeking a motivated Security Awareness Specialist to develop, coordinate, and deliver cybersecurity awareness and training programs for employees across the organization. You will help staff recognize threats, follow security policies, and adopt safe digital practices in daily work.

You will collaborate with information security, HR, IT, compliance, and leadership to strengthen the security culture, design engaging learning materials, and evaluate training effectiveness.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science or a related field preferred.
• Professional training or certifications may be considered in place of a degree.
• Interest in cybersecurity education, employee engagement, or risk management is desirable.

Responsibilities

• Develop and deliver cybersecurity awareness programs for diverse employee groups.
• Coordinate phishing simulations and evaluate results to guide follow-ups.
• Create onboarding materials and refresher training for staff.
• Translate security concepts into clear, actionable guidance for all levels.

Skills

Communication

Presentations

Training design

Cybersecurity awareness

Stakeholder collaboration

Education

Bachelor's degree or higher in cybersecurity/IT/CS/IS

Certifications acceptable in lieu of degree

Tools

LMS

Microsoft 365

Google Workspace

Presentation software (PowerPoint)

Job description

1. Job Summary

The Elite Job is seeking a motivated, knowledgeable, and employee-focused Security Awareness Specialist to develop, coordinate, and deliver engaging cybersecurity awareness and training programs. This role is responsible for helping employees understand cybersecurity threats, recognize suspicious activities, follow security policies, and adopt safe digital practices in their daily work.

The successful candidate will work closely with information security teams, human resources, IT departments, compliance professionals, and business leaders to strengthen the organizations security culture. The specialist will design practical learning materials, conduct security awareness sessions, coordinate phishing simulation campaigns, and evaluate the effectiveness of training initiatives.

The ideal candidate combines a strong understanding of cybersecurity principles with excellent communication, instructional design, and presentation skills. The ability to translate complex security concepts into clear, accessible, and actionable guidance for employees at all levels is essential.

This position offers an opportunity to contribute directly to organizational risk reduction by helping employees become an active part of the companys cybersecurity defense strategy.

2. Key Responsibilities

Employee Security Awareness and Training

• Develop and deliver comprehensive cybersecurity awareness programs tailored to different employee groups, departments, and job responsibilities.
• Conduct training sessions covering phishing, social engineering, password security, multi-factor authentication, secure browsing, data protection, and safe remote working practices.
• Create onboarding security awareness materials for new employees and provide refresher training for existing staff.
• Explain cybersecurity risks in simple, practical language that employees can understand and apply.
• Promote a culture in which employees feel confident reporting suspicious emails, unusual account activity, and potential security incidents.

Training Content Development

• Design engaging training presentations, digital learning modules, instructional videos, quick-reference guides, newsletters, and awareness campaigns.
• Develop realistic workplace scenarios and interactive exercises to demonstrate common cybersecurity threats.
• Review and update learning materials to reflect emerging threats, organizational security requirements, and changes in internal policy.
• Collaborate with subject matter experts to ensure that training content is technically accurate, relevant, and consistent with company standards.
• Adapt training materials for different learning styles, levels of technical knowledge, and accessibility requirements.

Phishing Simulations and Security Exercises

• Coordinate authorized phishing simulation campaigns to evaluate employees ability to recognize suspicious messages and social engineering attempts.
• Analyze campaign results, identify common mistakes, and recommend targeted follow-up training.
• Develop educational follow-up activities that help employees learn from simulated security events without creating a punitive learning environment.
• Monitor employee reporting behavior and encourage prompt escalation of suspicious communications.
• Work with security operations teams to incorporate relevant threat trends into awareness campaigns.

Program Measurement and Reporting

• Establish key performance indicators to measure training completion, knowledge retention, phishing simulation outcomes, and employee participation.
• Prepare regular reports for management, highlighting program progress, knowledge gaps, and opportunities for improvement.
• Maintain accurate training records, attendance information, assessment results, and compliance documentation.
• Use employee feedback, survey responses, and assessment scores to improve the quality and effectiveness of training.
• Recommend improvements based on measurable results, observed behaviors, and changing business risks.

Policy Communication and Compliance Support

• Help communicate information security policies, acceptable-use standards, data handling procedures, and incident reporting requirements.
• Support internal audits and compliance reviews by maintaining evidence of completed training and awareness activities.
• Assist with awareness initiatives related to privacy, confidential information, access control, data loss prevention, and regulatory obligations.
• Coordinate with HR, compliance, legal, and IT teams to ensure that awareness programs align with internal policies and applicable requirements.
• Support the preparation of employee communications during significant security updates or emerging threat situations.

Collaboration and Continuous Improvement

• Partner with cybersecurity professionals to identify workforce-related security risks and prioritize training topics.
• Work with HR and learning and development teams to integrate security awareness into employee development programs.
• Research new training methods, awareness platforms, and approaches to behavioral change.
• Maintain awareness of evolving cyber threats and translate relevant developments into timely educational content.
• Contribute to the continuous improvement of the organizations security awareness strategy.

3. Required Skills and Qualifications

Educational Qualifications

• Bachelors degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Communications, Human Resources, Education, or a related field is preferred.
• Relevant professional training, certifications, or practical experience may be considered in place of a degree where appropriate.
• A demonstrated interest in cybersecurity education, employee engagement, or information security risk management is desirable.

Technical Skills

• Good understanding of common cybersecurity threats, including phishing, malware, ransomware, credential theft, and social engineering.
• Knowledge of password management, multi-factor authentication, access control, secure data handling, and safe internet practices.
• Familiarity with information security policies, incident reporting procedures, and general security risk management principles.
• Understanding of security awareness platforms, learning management systems (LMS), and online training tools.
• Ability to interpret basic training analytics, assessment results, and phishing simulation metrics.
• Familiarity with Microsoft 365, Google Workspace, presentation software, spreadsheets, and digital communication tools.
• Awareness of recognized security frameworks and guidance, such as the NIST Cybersecurity Framework and relevant ISO 27001 awareness requirements, is an advantage.

Communication and Training Skills

• Excellent written and verbal communication skills.
• Strong presentation and facilitation abilities, including the ability to engage audiences with different levels of technical expertise.
• Experience creating educational materials, presentations, training guides, or digital learning content.
• Ability to simplify complex technical information without compromising accuracy.
• Strong interpersonal skills and the ability to collaborate effectively across departments.
• Good organizational skills, attention to detail, and the ability to manage multiple training initiatives.

4. Experience

Entry-level candidates

• Candidates with relevant academic projects, internships, cybersecurity coursework, training experience, or a strong interest in security awareness may be considered.

Preferred experience

• One to three years of experience in cybersecurity awareness, information security, employee training, learning and development, IT support, or a related field.

Experienced candidates

• Previous responsibility for delivering enterprise-wide awareness programs, managing phishing simulations, developing training content, or reporting security awareness metrics is an advantage.
• Experience working with a learning management system, awareness campaign platform, or employee communication tool is beneficial.
• Experience collaborating with HR, IT, compliance, or risk management teams is desirable.

• Candidates should demonstrate a willingness to learn, a practical understanding of cybersecurity risks, and the ability to communicate effectively with employees and stakeholders.

5. Working Hours

• Employment type: Full-time.
• Typical schedule: Monday to Friday, based on the organizations operating hours.
• Standard working hours: Approximately 8 hours per day, subject to company policy and applicable employment regulations.
• Work arrangement: Remote, hybrid, or on-site, depending on the position and business requirements.
• Flexibility: Occasional schedule adjustments may be required to accommodate training sessions across time zones, employee onboarding schedules, or company-wide security campaigns.
• Meetings and collaboration: Participation in virtual meetings, training workshops, planning sessions, and progress reviews may be required.
• Additional hours: Occasional additional availability may be necessary during major awareness campaigns or urgent security communications.
• The final working schedule and employment conditions will be communicated during the recruitment process.

6. Knowledge, Skills, and Abilities

Knowledge

• Understanding of information security fundamentals and common employee-related cybersecurity risks.
• Knowledge of social engineering techniques, phishing indicators, identity protection, and secure information handling.
• Familiarity with security awareness best practices and behavior-focused training approaches.
• Understanding of employee learning principles, training evaluation methods, and knowledge retention techniques.
• General awareness of privacy principles, confidentiality requirements, and information security compliance obligations.

Skills

• Training program planning, coordination, and delivery.
• Instructional content development and presentation design.
• Cybersecurity communication and employee engagement.
• Data interpretation, performance tracking, and report preparation.
• Project coordination, time management, and stakeholder communication.
• Problem-solving, critical thinking, and continuous improvement.
• Ability to use digital learning tools and common workplace productivity applications.

Abilities

• Explain security concepts clearly to technical and non-technical audiences.
• Encourage positive security behavior through practical guidance and constructive feedback.
• Identify knowledge gaps and recommend appropriate learning interventions.
• Manage multiple assignments while maintaining accuracy and meeting deadlines.
• Handle confidential company information responsibly.
• Adapt training methods to changing threats, employee feedback, and organizational priorities.
• Work independently when required while contributing effectively to a collaborative team.
• Demonstrate professionalism, discretion, and a strong commitment to ethical information security practices.

7. Benefits

• The Elite Job aims to provide a supportive and professional working environment. Depending on the employment arrangement and applicable company policies, benefits may include:
• Competitive salary based on qualifications, experience, and role responsibilities.
• Remote or hybrid working opportunities for eligible positions.
• Paid leave and applicable public holidays in accordance with employment terms.
• Professional development opportunities in cybersecurity awareness, information security, and employee training.
• Access to relevant learning resources, workshops, and certification preparation where available.
• Opportunities to work with cybersecurity, HR, IT, compliance, and business teams.
• A collaborative environment that encourages knowledge sharing and continuous improvement.
• Opportunities to develop expertise in security education, risk communication, and organizational resilience.
• Performance feedback and potential career progression based on business needs and individual contribution.
• Specific benefits, eligibility requirements, and compensation details will be confirmed in the official offer and employment documentation.

8. Why Join The Elite Job?

Joining The Elite Job as a Security Awareness Specialist offers an opportunity to contribute to a critical area of modern business: protecting organizations by strengthening the human side of cybersecurity.

Cybersecurity tools are essential, but employees also play a vital role in preventing incidents. This position allows you to help people recognize threats, make safer decisions, and respond appropriately when something appears suspicious.

As part of the team, you may have the opportunity to:

• Make a meaningful impact: Help reduce security risks by improving employee awareness and everyday security practices.
• Develop professional expertise: Build knowledge across cybersecurity, training design, risk communication, and compliance support.
• Work collaboratively: Engage with professionals from IT, HR, security operations, compliance, and other business functions.
• Support continuous learning: Develop creative training programs that encourage lasting behavioral improvements.
• Build a career in cybersecurity: Gain experience that can support progression into security awareness management, security governance, risk and compliance, or cybersecurity program management.
• Contribute innovative ideas: Explore new learning techniques, awareness tools, and practical approaches to security education.
• We value professionals who are curious, responsible, adaptable, and committed to helping others work securely. If you enjoy combining communication and education with technology and risk reduction, this role could be an excellent fit.