Security Consultant (Awareness And Communication Specialist)en Sant Cugat del Vallès, Barcelona.

our client

Our client is a global leader in Testing, Inspection and Certification (TIC), delivering high quality services to help clients meet the growing challenges of quality, safety, environmental protection, and social responsibility.
We are hiring a Security Consultant (Awareness And Communication Specialist) to join the global security team.

your functions

To support the Cybersecurity GRC Manager in implementing and maintaining the organization's cybersecurity strategy, with a focus on cyber awareness, training, behavior change, and media communication, aligned with NIST CSF and ISO 27001 frameworks.
Key Responsibilities:
1. Cyber Awareness and Training:
Develop, implement, and maintain a comprehensive cybersecurity awareness
program for all employees
Design and deliver engaging cybersecurity training materials, including e-learning
modules, workshops, and simulations
Tailor training content for different roles and levels within the organization
Measure the effectiveness of awareness initiatives and training programs, and
continuously improve based on feedback and results

2. Behavior Change Management:
Develop strategies to promote positive cybersecurity behaviors across the
organization
Implement behavior change campaigns to address specific security risks or
challenges
Collaborate with HR and management to integrate cybersecurity best practices
into employee onboarding and performance evaluations

3. Media and Internal Communication:
Develop and maintain a cybersecurity communication strategy aligned with
overall organizational goals
Create and distribute regular cybersecurity updates, newsletters, and alerts to
keep employees informed about current threats and best practices
Act as a liaison with the Corporate Communications team for cybersecurity-
related external communications and media inquiries
Prepare briefing materials and talking points for leadership on cybersecurity
matters

4. Risk Assessment and Management:
Perform risk analyses for internal projects and new business applications,
focusing on human factors and awareness aspects
Conduct assessments of the organization's cybersecurity culture and recommend improvements
Support the Cybersecurity GRC Manager in maintaining the human-centric
aspects of the organization's risk register

5. Security by Design:
Incorporate awareness and human factors considerations into the "security by design" framework
Advise project teams on user-centric security measures from project initiation to
go-live
Provide guidance on secure application development from a user perspective

6. Stakeholder Management:
Act as a point of contact for business teams on cybersecurity awareness and
communication topics
Collaborate with IT, HR, and other departments to ensure consistent messaging
and approach to cybersecurity
Build relationships with external partners and industry groups to stay informed
about best practices in cybersecurity awareness and communication

position requisites

• Formación

  : Grado

• Idiomas

  : Inglés: C1

• Conocimientos

  : gdpr, iso27001

• Experiencia

  : 3 años

Education:
Masters degree in Computer Science, Information Security, Communications, or related field
Relevant certifications (e.g., CISSP, CISM, NIST CSF Practitioner)

Experience:
5+ years of experience in cybersecurity, with a focus on awareness, training, and
communication
Experience in developing and implementing cybersecurity awareness programs
Experience in behavior change management and organizational communication
Knowledge:
In-depth understanding of NIST CSF and ISO 27001 frameworks
Expertise in cybersecurity best practices and current threat landscape
Knowledge of adult learning principles and training methodologies
Understanding of behavior change theories and practices
Familiarity with communication strategies and media relations

Skills and Abilities:
Excellent communication skills, both written and verbal
Strong presentation and public speaking abilities
Creativity in developing engaging and effective awareness materials
Proficiency in using various communication tools and platforms
Ability to translate complex technical concepts into user-friendly language
Strong project management and organizational skills
Adaptability and willingness to stay current with evolving cybersecurity trends
Proficiency in project management and process improvement methodologies
Ability to work in multi-geographic, multi-cultural teams

why with Randstad?

sustainable jobs