CyberSecurity Awareness Specialist
Function
We're seeking an experienced Phishing Awareness & Cybersecurity Consultant to support our client's cybersecurity organization. The consultant will be responsible for defining, structuring, and delivering a comprehensive phishing awareness strategy for a large and diverse workforce operating within a Microsoft 365 environment. This assignment combines strategic planning, stakeholder engagement, communication, campaign management, and knowledge transfer to establish a sustainable security awareness program.
Key Responsibilities
- Assess the current cybersecurity awareness landscape and validate an existing maturity analysis.
- Develop a comprehensive phishing awareness roadmap covering a 12- to 24-month period.
- Design a structured catalog of phishing simulation campaigns, including target audiences, difficulty levels, and attack scenarios.
- Collaborate with cybersecurity, communications, and business stakeholders to define and execute a multi-channel internal communication strategy.
- Establish KPIs, maturity indicators, reporting frameworks, and executive dashboards to measure program effectiveness.
- Deliver knowledge transfer and documentation to enable long-term internal ownership of phishing awareness initiatives.
- Manage phishing simulation campaigns end-to-end, including assessment, implementation, configuration, execution, reporting, and results analysis.
The Ideal Candidate
The successful candidate combines strong cybersecurity expertise with excellent stakeholder management and communication skills. You are customer-focused, solution-oriented, and capable of translating security objectives into practical and measurable awareness initiatives.
Key requirements include:
- Extensive experience in cybersecurity and security awareness programs.
- Strong knowledge of Microsoft 365 environments, including Exchange Online.
- Experience defining cybersecurity KPIs, maturity models, and reporting mechanisms.
- Proven ability to drive organizational change and user adoption initiatives.
- Excellent analytical, presentation, communication, and stakeholder management skills.
- Familiarity with information security frameworks and governance practices, including ISO 27001.