Security Specialist

Focus Financial Partners; Chicago (IL); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Focus Financial Partners is seeking a Security Specialist to lead the firm’s cybersecurity awareness and training program across Focus firms. You will deliver engaging, risk-based training to employees at all levels and work with Legal, Privacy, Compliance, HR, IT, and Security to ensure alignment with regulatory requirements and internal policies.

The role is hybrid, with 3 days per week in the St. Louis office.

Responsibilities

• Lead the cybersecurity awareness and training program across Focus firms.
• Deliver mandatory annual security training, role-based training, and targeted campaigns against key risks (phishing, social engineering, data protection).
• Manage phishing simulations: design, deliver, analyze, and education follow-up.
• Coordinate training rollouts, schedules, and communications for consistent adoption across business units.
• Develop and refresh training content to stay relevant and engaging.
• Tailor materials for employees, advisors, leadership, and specialized roles.
• Incorporate incident lessons, regulatory feedback, and threat trends into content.
• Balance regulatory requirements with practical messaging that supports productivity.

Job description

Job Description Summary

This Security Specialist role will serve as a lead for cybersecurity awareness & training program responsible for the execution and continuous improvement of the firm’s cybersecurity awareness and training program across all Focus firms. This role serves as the primary owner for delivering engaging, effective, and risk‑based cybersecurity training to employees at all levels of the organization.

Reporting to the Head of Cybersecurity Governance, this individual‑contributor role works in close partnership with Legal, Privacy, Regulatory Compliance, HR, IT, and Security teams to ensure training content aligns with regulatory requirements, internal policies, and evolving cyber threats. The role plays a critical part in strengthening the firm’s security culture and reducing human‑driven cyber risk.

This role is hybrid with 3 days per week in our St. Louis office.

Job Description

Primary Responsibilities

Cybersecurity Awareness & Training Program Delivery

• Execute the firm‑wide cybersecurity awareness and training program across all Focus firms.
• Deliver mandatory annual security training, role‑based training, and targeted campaigns addressing key cyber risks (e.g., phishing, social engineering, data protection).
• Manage and execute phishing simulation programs, including campaign design, delivery, analysis, and follow‑up education.
• Coordinate training rollouts, schedules, and communications to ensure consistent adoption across diverse business units.

Content Development & Continuous Improvement

• Develop, maintain, and refresh cybersecurity training content to ensure relevance, clarity, and engagement.
• Tailor training materials for different audiences, including employees, advisors, leadership, and specialized roles.
• Incorporate lessons learned from incidents, phishing results, regulatory feedback, and emerging threat trends into training content.
• Balance regulatory requirements with practical, user‑friendly messaging that supports business productivity.

Regulatory, Legal & Compliance Partnership

• Work closely with Legal, Privacy, and Regulatory Compliance teams to ensure training content aligns with applicable laws, regulations, and contractual obligations.
• Support regulatory examinations, audits, and client due diligence efforts by providing training materials, metrics, and evidence.
• Maintain documentation demonstrating compliance with cybersecurity training and awareness requirements.
• Monitor regulatory expectations related to security awareness and adjust training accordingly.

Measurement, Reporting & Risk Reduction

• Define and track key training and awareness metrics (e.g., completion rates, phishing susceptibility, behavioral improvements).
• Analyze trends and results to identify risk areas and inform targeted training initiatives.
• Provide regular reporting and insights to the Head of Cybersecurity Governance and other stakeholders.
• Demonstrate the effectiveness of training programs in reducing human‑driven cyber risk.

Cross‑Functional Collaboration

• Partner closely with Cybersecurity Risk, Engineering, and Operations teams to align training with real‑world threats and controls.
• Coordinate with HR and Communications teams to support onboarding,