Security Awareness & Communications Specialist

The Security Awareness & Communications Specialist is responsible for developing, delivering, and continuously improving the organisation's security awareness, education, and communication programmes. The role will ensure colleagues understand their security responsibilities through engaging, relevant, and role-based learning experiences. The individual will create impactful communications that help build a positive security culture, increase awareness of emerging threats, and support organisational compliance with security policies, standards, and regulatory requirements. This role combines elements of cyber security, internal communications, marketing, learning and development, and digital content creation to make security understandable, accessible, and engaging for all employees.

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS. 

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

• Own and continuously improve the organisation's security awareness programme.

• Develop role-based training aligned to different business functions, including:

• Leadership and Executive teams o Software Engineering
• Product Management o IT and Support Teams
• Customer-facing functions
• General end users

• Ensure training content remains relevant to emerging threats, organisational risks, and security priorities.

• Identify high-risk user groups and tailor awareness interventions accordingly.

• Coordinate annual and mandatory awareness training campaigns.

• Measure training effectiveness and recommend improvements.

• Deliver targeted awareness initiatives in response to incidents, audit findings, emerging threats, and industry trends.

• Plan, coordinate and analyse phishing simulation exercises.

• Use simulation outcomes to inform targeted awareness activities and risk reduction initiatives.

• Support compliance with security awareness and training requirements arising from applicable security frameworks, certifications, customer commitments and regulatory obligations.

• Work closely with Security Operations to incorporate real-world threat intelligence and lessons learned into awareness content.

• Own security communications across the organisation.

• Create engaging communications using a variety of formats including:

• Newsletters
• Articles
• Intranet content
• Videos
• Infographics
• Interactive campaigns
• Executive messages
• Awareness posters and digital signage

• Translate technical security topics into clear business-friendly language.

• Promote awareness of new policies, standards, initiatives, and security improvements.

• Coordinate communications during awareness campaigns such as:

• Cyber Security Awareness Month
• Phishing awareness initiatives
• Policy launches
• Security improvement programmes

• Track awareness programme performance through defined KPIs.

• Produce regular reporting for security leadership and governance forums.

• Measure:

• Training completion rates
• Phishing simulation outcomes
• User engagement levels
• Campaign participation
• Security culture maturity indicators

• Recommend improvements based on data, trends, and employee feedback.

• Partner with SGRC, Security Operations, Security Engineering, IT, HR, Internal Communications, and Learning & Development teams.

• Ensure awareness activities support compliance objectives and organisational risk priorities.

• Support customer and audit requests relating to security awareness and training effectiveness.

Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes.  Please do not forward any unsolicited resumes to any RWS employees.  Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

• Experience delivering employee awareness, training, communications, or engagement programmes.

• Exceptional written and verbal communication skills.

• Strong content creation and storytelling capabilities.

• Experience creating digital communications assets.

• Ability to explain complex technical subjects in simple, engaging language.

• Experience using content creation or design tools such as:

• Canva
• Adobe Creative Suite
• Microsoft Designer
• PowerPoint
• SharePoint
• Viva Engage

• Strong stakeholder management skills.

• Excellent organisational and project management capabilities.

• Experience within cyber security, information security, IT, risk, or compliance environments.

• Marketing, communications, journalism, learning & development, or employee engagement background.

• Experience delivering phishing simulations and awareness campaigns.

• Understanding of security frameworks such as:

• ISO 27001
• SOC 2
• NIST Cybersecurity Framework

• Experience creating video, multimedia, or interactive learning content.