At a Glance
- Tasks: Lead cyber security awareness and behaviour change initiatives to enhance organisational culture.
- Company: Join SPEN, a leader in cyber security within the energy sector.
- Benefits: Enjoy a competitive salary, hybrid working, and opportunities for professional growth.
- Other info: Collaborate with diverse teams and contribute to continuous improvement in cyber capabilities.
- Why this job: Make a real impact on cyber security culture and reduce risks in a dynamic environment.
- Qualifications: Experience in cyber security awareness and behaviour change programmes is essential.
The predicted salary is between 63000 - 77000 £ per year.
SPEN are looking for an Awareness, Behaviour, and Culture Skills Lead to join their cyber security team based in Glasgow. This is a 12 month initial contract with scope of renewal, offering hybrid style working. The role is full time, Monday to Friday, and falls inside IR35, with PAYE and Umbrella options available.
Role Purpose: The Awareness, Behaviour and Skills Lead will be responsible for developing, implementing and continuously improving SPEN's cyber security awareness, behaviour change and skills development programmes across employees, contractors and third parties. The role will lead the design and delivery of initiatives that strengthen cyber security culture, reduce human-related cyber risks, and improve the cyber capabilities required to support SPEN's strategic, operational and regulatory objectives. A key responsibility will be to lead the development and implementation of cyber skills frameworks, competency models, learning pathways and capability assessments, ensuring that SPEN has the cyber skills required today and into the future. The successful candidate will also possess a strong understanding of Insider Risk Management and will support the development of targeted awareness, behavioural and educational activities designed to reduce insider-related threats and vulnerabilities.
Key Responsibilities:
- Awareness, Engagement and Behaviour Change: Develop and deliver SPEN's cyber security awareness strategy and annual delivery plan. Design and implement engaging awareness campaigns that drive measurable behavioural improvements. Lead the creation of awareness materials, training content, communications, workshops, videos and learning resources. Support the delivery of awareness activities to employees, contractors, supply chain partners and third-party organisations. Work collaboratively with communications, HR, operational teams and business stakeholders to embed cyber security into everyday decision-making and behaviours. Measure the effectiveness of awareness and behaviour change programmes through defined metrics, reporting and outcome-based assessments. Identify emerging threats and develop targeted awareness interventions to address specific risks.
- Insider Risk Management: Develop an understanding of insider risk threats within the SPEN operating environment. Collaborate with cyber security, HR, legal, physical security and business teams to support Insider Risk Management initiatives. Design and deliver awareness activities that educate staff on insider threats, information handling, acceptable use, data protection and secure behaviours. Support the development of behavioural indicators, communication campaigns and training materials aimed at reducing insider-related risks. Contribute to the continuous improvement of SPEN's Insider Risk Management capabilities through awareness, education and engagement.
- Skills, Competency and Workforce Development: Lead the development, implementation and maintenance of cyber security skills and competency frameworks. Establish role-based learning pathways aligned to organisational needs and recognised industry frameworks. Conduct skills gap assessments and capability reviews to identify development priorities. Develop competency models covering both technical and non-technical cyber security roles. Create development programmes that support professional growth, career progression and workforce planning. Collaborate with HR, Learning & Development and leadership teams to integrate cyber skills development into broader organisational talent strategies. Track and report on capability maturity, skills development outcomes and workforce readiness.
- Governance and Continuous Improvement: Maintain awareness of emerging industry trends, threats, learning methodologies and cyber skills frameworks. Ensure awareness and training programmes align with SPEN policies, standards and regulatory obligations. Support regulatory activities related to cyber culture, workforce capability and organisational resilience. Develop performance measures and reporting mechanisms to demonstrate programme effectiveness and return on investment. Drive continuous improvement through feedback, lessons learned and performance analytics.
Essential Knowledge and Experience:
- Experience developing and delivering cyber security awareness programmes.
- Experience designing and implementing behaviour change initiatives.
- Experience developing learning and development programmes within a complex organisation.
- Experience creating engaging awareness, training and communications content.
- Experience working with a broad range of stakeholders at all organisational levels.
- Experience developing and implementing workforce skills or competency frameworks.
- Experience conducting capability assessments and skills gap analyses.
- Experience measuring and reporting programme effectiveness using data and metrics.
Knowledge:
- Strong understanding of cyber security principles and cyber risk management.
- Good understanding of Insider Risk Management concepts, threats and mitigations.
- Knowledge of behavioural science and behaviour change methodologies.
- Knowledge of cyber culture development and organisational change practices.
- Familiarity with recognised cyber skills frameworks such as: SFIA (Skills Framework for the Information Age), NIST NICE Cybersecurity Workforce Framework, UK Cyber Security Council Career Framework, and relevant industry competency models.
Desirable Knowledge and Experience:
- Experience within critical national infrastructure, utilities or regulated industries.
- Experience supporting NIS Regulations, CAF, ISO27001 or similar regulatory frameworks.
- Relevant qualifications in cyber security, learning and development, organisational psychology, behavioural science or related disciplines.
- Experience developing insider risk awareness programmes.
- Experience managing external awareness providers, training partners or digital learning platforms.
ABC Skills Lead in Paisley employer: Morson Edge
Join a forward-thinking engineering firm in Manchester, where as a Senior Electrical Designer, you will thrive in a collaborative and innovative work culture. With a strong focus on employee growth, you will have the opportunity to mentor junior designers while working on significant projects across Water and Nuclear sectors, all within a hybrid working model that promotes work-life balance. Enjoy competitive salary packages and the chance to contribute to impactful engineering solutions in a supportive environment.
StudySmarter Expert Advice🤫
We think this is how you could land ABC Skills Lead in Paisley
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Morson Edge, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Morson Edge
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Morson Edge. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace ABC Skills Lead in Paisley
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Morson Edge insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Morson Edge that you’re committed to staying ahead in the game.
How to prepare for a job interview at Morson Edge
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Morson Edge to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Morson Edge.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
