Cyber Security Culture Manager

- Define and own the long-term strategy for cyber security culture, ensuring alignment with business objectives, regulatory requirements, and industry best practice. - Establish a clear roadmap for cultural maturity and embed security as a core value. - Monitor and assess cultural maturity through surveys, KPIs, and behavioural metrics. - Identify gaps and implement initiatives that strengthen security behaviours and reduce human risk. - Champion best practices and foster collaboration between security teams and business units. - Promote a high-performing, collaborative, and values-driven environment within and across the security teams. - Develop initiatives that improve team engagement, communication, and alignment with the security vision. - Act as a role model for cultural leadership within the security function. - Plan, coordinate and facilitate Group Cyber Security (GCS) team meetings. - Develop high-quality, impactful content for internal audiences, including executive communications, presentations, and thought leadership pieces. - Ensure messaging reflects the Groups security vision, priorities, and cultural objectives. - Collaborate with corporate communications to maintain consistency and clarity in all security-related messaging. - Partner with Global Cyber Security peers to ensure cultural initiatives complement technical controls, risk frameworks, and strategic priorities. - Work closely with the Cyber Transformation Programme and BTS to deploy phishing simulation campaigns and implement tools that uplift cyber culture. - Align cultural objectives with broader security programmes to deliver a unified and effective security posture. - Build strong relationships with senior leaders, divisional business units, and functional teams to influence and embed security culture. - Represent the Group in relevant forums, working groups, and industry networks to share insights and adopt best practices. - Define KPIs and success metrics for cultural initiatives and report progress to the CISO and senior leadership. - Use data-driven insights to refine strategies and demonstrate measurable improvements in security culture.