Responsible for shaping and embedding a strong security culture in cyber, physical and people across NPL. Lead initiatives that influence behaviour and reduce human-related risk in compliance with regulatory and customer requirement, ensuring all colleagues have the appropriate level of awareness, knowledge, and skills to manage security risks in alignment with our programmes security values and policies.
Key responsibilities
- Develop and implement a security culture strategy aligned with NPL values, business objectives, and security risk priorities.
- Champion a security-first mindset by leading initiatives, campaigns, and communications that make security relatable, actionable, and embedded in everyday work.
- Design and deliver continuous security awareness programmes, including e-learning, workshops, campaigns, and executive briefings. Complement annual mandatory training with “just-in-time” learning resources to keep colleagues informed, engaged and mitigate risk of security breaches through best practice.
- Identify gaps in security knowledge and behaviours and develop targeted interventions to address these risks effectively.
- Tailor training and awareness activities for different roles and risk profiles across the organisation.
- Create and track metrics to measure effectiveness of initiatives and drive positive behavioural change.
- Collaborate with corporate functions and major programmes (People Team, Communications, IT, Assurance, etc.) to align messaging and priorities.
- Act as a trusted advisor on embedding security into processes, procedures, and organisational culture.
- Provide subject matter expertise on human risk management, social engineering awareness, and behavioural change.
- Stay informed on best practices in security culture development, learning methodologies, and behavioural science.
- Responsible for taking reasonable duty of care for Health & Safety of themselves and of other persons who may be affected by their acts or omissions at work and always follow direct instructions given with regards to Health & Safety.
About You
- Proven experience in developing and delivering security awareness and culture programmes within a complex organisation.
- Experience working within or closely with Government, defence, or other highly regulated environments.
- Strong understanding of cyber security principles, physical security, and human risk factors.
- Knowledge of behavioural science or change management methodologies to influence organisational behaviour.
- Excellent communication skills with the ability to translate technical security concepts into clear, engaging messages for diverse audiences.
- Experience in stakeholder engagement and collaboration across multiple business functions.
- Ability to design and measure metrics for cultural change and training effectiveness.
- Project management skills to plan, execute, and evaluate initiatives on time and within budget.
- Professional certifications such as CISSP, CISM, or certifications in security awareness (e.g., SANS Security Awareness Professional).
- Background in communications, psychology, or organisational development.
Personal Attributes
- Collaborative communicator who builds strong relationships and influences others.
- Customer-focused with an ability to align security culture to organisational needs.
- Innovative and curious, bringing creative ideas to engage colleagues.
- Decisive and informed, confident in making evidence-based decisions.Driven and adaptable, committed to continuous improvement and learning.
We actively recruit citizens of all backgrounds, but the nature of our work in specific departments means that nationality, residency and security requirements can be more tightly defined than others. You will be asked about this throughout the recruitment process. To work at NPL, you will need to obtain BPSS security clearance.
You will need to have an SC clearance with no restrictions, or you must have the ability to obtain an SC clearance.
This is a hybrid working role, and is split between 3 days on‐site and 2 days WFH.
#J-18808-Ljbffr
Full job description from WhatJobs. Apply for this role →