At a Glance
- Tasks: Lead cyber security awareness and behaviour change initiatives to enhance SPEN's security culture.
- Company: Join SPEN, a leader in energy networks, committed to cyber security excellence.
- Benefits: Enjoy a competitive salary, hybrid working, and opportunities for professional growth.
- Other info: Dynamic role with potential for contract renewal and career advancement.
- Why this job: Make a real impact on cyber security while developing essential skills for the future.
- Qualifications: Experience in cyber security awareness and behaviour change is essential.
The predicted salary is between 63000 - 77000 £ per year.
SPEN are looking for an Awareness, Behaviour, and Culture Skills Lead to join their cyber security team based in Glasgow. This is a 12 month initial contract with scope of renewal, offering hybrid style working. The role is full time, Monday to Friday, and falls inside IR35, with PAYE and Umbrella options available.
Role Purpose: The Awareness, Behaviour and Skills Lead will be responsible for developing, implementing and continuously improving SPEN's cyber security awareness, behaviour change and skills development programmes across employees, contractors and third parties. The role will lead the design and delivery of initiatives that strengthen cyber security culture, reduce human-related cyber risks, and improve the cyber capabilities required to support SPEN's strategic, operational and regulatory objectives. A key responsibility will be to lead the development and implementation of cyber skills frameworks, competency models, learning pathways and capability assessments, ensuring that SPEN has the cyber skills required today and into the future. The successful candidate will also possess a strong understanding of Insider Risk Management and will support the development of targeted awareness, behavioural and educational activities designed to reduce insider-related threats and vulnerabilities.
Key Responsibilities:
- Awareness, Engagement and Behaviour Change: Develop and deliver SPEN's cyber security awareness strategy and annual delivery plan. Design and implement engaging awareness campaigns that drive measurable behavioural improvements. Lead the creation of awareness materials, training content, communications, workshops, videos and learning resources. Support the delivery of awareness activities to employees, contractors, supply chain partners and third-party organisations. Work collaboratively with communications, HR, operational teams and business stakeholders to embed cyber security into everyday decision-making and behaviours. Measure the effectiveness of awareness and behaviour change programmes through defined metrics, reporting and outcome-based assessments. Identify emerging threats and develop targeted awareness interventions to address specific risks.
- Insider Risk Management: Develop an understanding of insider risk threats within the SPEN operating environment. Collaborate with cyber security, HR, legal, physical security and business teams to support Insider Risk Management initiatives. Design and deliver awareness activities that educate staff on insider threats, information handling, acceptable use, data protection and secure behaviours. Support the development of behavioural indicators, communication campaigns and training materials aimed at reducing insider-related risks. Contribute to the continuous improvement of SPEN's Insider Risk Management capabilities through awareness, education and engagement.
- Skills, Competency and Workforce Development: Lead the development, implementation and maintenance of cyber security skills and competency frameworks. Establish role-based learning pathways aligned to organisational needs and recognised industry frameworks. Conduct skills gap assessments and capability reviews to identify development priorities. Develop competency models covering both technical and non-technical cyber security roles. Create development programmes that support professional growth, career progression and workforce planning.
