About the Role

This role is responsible for building and strengthening the organization's cybersecurity culture through awareness programs, training, engagement initiatives, and capability development. The position combines security awareness, learning administration, phishing simulation management, and employee capability development to ensure that security becomes a shared responsibility across the business.

Responsibilities

Security Awareness Campaigns

- Design, plan and deliver end-to-end security awareness campaigns across the organisation, covering relevant cybersecurity topics and relevant risks for example Artificial Intelligence.
- Manage the annual awareness calendar, ensuring campaigns are timely, relevant and aligned to the organisation's current risk landscape.
- Develop or coordinate with supplier to deliver engaging, audience-appropriate content across multiple formats (e-learning, video, intranet, posters, newsletters, toolkits).
- Coordinate with Internal Communications, central functions and business unit partners to maximise campaign reach and effectiveness.
- Track and report on campaign engagement metrics and outcomes.

CCN (Cyber Champions Network) Ownership & Orchestration

- Own and run the Cyber Champions Network (CCN) across the group, acting as the primary point of contact for Champions across markets, business units and functions.
- Coordinate regular CCN communications, meetings and events to keep Champions engaged and informed.
- Develop toolkits, guides and resources to enable Champions to drive local security culture initiatives.
- Monitor CCN health and participation, and develop strategies to grow and sustain the network.

Phishing Simulations





- Design and execute phishing simulation campaigns using the organisation's chosen platform, ensuring scenarios are realistic, varied and progressively challenging.
- Analyse simulation results, identify trends and at-risk populations, and develop targeted follow-up interventions.
- Produce clear, actionable reporting on phishing simulation outcomes for GRC leadership and relevant business stakeholders.

LMS Administration & Support

- Administer the organisation's Learning Management System (LMS), including user management, content uploads, course assignments and completion tracking.
- Ensure mandatory security training is assigned, tracked and completed within required timeframes across all relevant populations.
- Troubleshoot LMS issues and liaise with the LMS team or internal IT teams as required.
- Maintain accurate training completion records and produce compliance reporting.

SRC Skills Matrix & Learning Paths

- Develop and maintain the SRC skills matrix, mapping required competencies across GRC, security operations, risk management and compliance disciplines.
- Design role-appropriate learning paths for SRC team members and, where relevant, for the broader IT and business community.
- Identify skills gaps within the SRC team and recommend targeted development interventions.




- Keep learning paths current by monitoring evolving industry certifications, frameworks and skill requirements.

Qualifications Required Qualifications & Experience

- 5+ years of experience in cybersecurity, GRC, or IT Risk, with a focus on or strong interest in security awareness, culture and capability development.
- Demonstrated hands-on experience designing and delivering security awareness programmes or campaigns.
- Experience administering or working within an LMS platform (e.g. LearnUpon, Proofpoint, or similar).
- Practical experience running phishing simulation programmes.
- Familiarity with security awareness frameworks and best practices (e.g. SANS Security Awareness, NIST SP 800-50, ISO 27001 Annex A.7.2.2).
- Strong written communication and content creation skills.
- Experience working cross-functionally with HR and Communications teams advantageous.

Required Skills

Key Competencies

- Execution-focused with strong delivery discipline and attention to detail.
- Creative communicator with the ability to make security topics engaging and accessible to non-technical audiences.
- Organised and structured, able to manage multiple concurrent campaigns and workstreams.
- Cooperative and relationship-oriented, with the ability to work effectively with a distributed network of Champions and cross-functional partners.
- Data-driven approach to measuring programme effectiveness and driving continuous improvement.
- Self-sufficient and proactive - comfortable operating with a degree of autonomy and minimal supervision.
- Genuine passion for building security culture and developing people's security capabilities.

📌 Manager, Cyber Security Culture & Skill (Bengaluru)
🏢 The Adecco Group
📍 Bengaluru