Cyber Security Awareness Specialist ## Job Summary The Cybersecurity Awareness Specialist supports the execution of Securitas North America’s cybersecurity culture and human risk management initiatives. This role is primarily responsible for administering phishing and social engineering simulations, analyzing results, and supporting cybersecurity awareness training efforts across the division. Working under the direction of the Manager, Cybersecurity Culture & Human Risk Management, this position plays a key role in identifying human risk trends and reinforcing secure behaviors through targeted testing, reporting, and training support. This is a remote position. ESSENTIAL FUNCTIONS: - The functions listed describe the business purpose of this job or position. Specific duties or tasks may vary and be documented separately. An associate might or might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity. - All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions. - Associates are held accountable for successful job performance. Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein. - In performing functions, duties or tasks, associates are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations. Associates are required to notify superiors upon becoming aware of unsafe working conditions. - All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures. In the event of uncertainty or lack of knowledge of company policies and procedures, associates are required to request clarification or explanations from superiors or authorized company representatives. Social Engineering & Phishing Simulations • Coordinate and execute phishing simulations and other social engineering exercises (e.g., smishing, vishing) across North America. • Utilize approved platforms (e.g., KnowBe4, Microsoft Defender) to deploy campaigns. • Manage campaign scheduling, targeting, and assignment of follow-up training. • Monitor and track key campaign metrics, including: • Click-through rates • Reporting rates • Repeat click behavior • Remedial training completion • Escalate findings and trends to the Manager for program refinement. • Maintain documentation of campaign execution and results. Data Tracking & Reporting (Excel-Based) • Compile, organize, and analyze phishing and training data using Microsoft Excel. • Create pivot tables, charts, and summary reports to support leadership updates. • Assist in tracking key performance indicators related to phishing performance and training completion. • Support preparation of monthly and quarterly reporting materials. Training & Awareness Support • Assist in the development and distribution of cybersecurity awareness materials. • Support onboarding and annual mandatory training administration. • Help create and coordinate awareness campaigns, webinars, and internal communications. • Provide logistical and administrative support for awareness initiatives. Incident & Awareness Support • Assist in reviewing reported phishing emails and awareness-related inquiries. • Help identify trends and training gaps based on campaign outcomes. • Maintain accurate records to support audit and compliance requirements. Collaboration • Work closely with the Manager, Cybersecurity Culture & Human Risk Management. • Partner with IT, Digital Security, HR, and Communications teams as needed. • Support divisional initiatives across the United States, Canada, and Mexico. MINIMUM QUALIFICATIONS AT ENTRY: Additional qualifications may be specified and receive preference, depending upon the nature of the position. Education/Experience: - Bachelor’s degree in communications, information security, or information technology, OR High School diploma with equivalent work experience. - 1-3 years’ experience in cybersecurity, compliance, or related field preferred - Experience administering phishing simulations preferred - Strong written and verbal communication skills preferred - Preferred certifications: SANS Security Awareness Professional (SSAP), CompTIA Security, or other relevant cybersecurity certifications Competencies (as demonstrated through experience, training, and/or testing): - Strong analytical and problem-solving skills - Ability to work independently and as part of a team - Strong attention to detail and organizational skills - Effective written and verbal communication skills - Ability to manage multiple tasks and meet deadlines Technical Skills - Microsoft 365 (Excel, PowerPoint, Outlook, Teams) - Proficiency in MS Excel (pivot tables, formulas, basic data analysis) - Phishing simulation platforms (e.g., KnowBe4) preferred - Smartsheet (preferred) - Microsoft Defender (preferred) WORKING CONDITIONS AND PHYSICAL/MENTAL DEMANDS: With or without reasonable accommodation, requires the physical and mental capacity to perform effectively all essential functions. In addition to other demands, the demands of the job include: - Maintaining composure in dealing with executives, clients, prospects, and staff, in group settings and in situations requiring high performance and results. - Must undergo and meet company standards for controlled substance testing, and behavioral selection survey. - Handling and being exposed to sensitive and confidential information. - Required ability to handle multiple tasks concurrently. - Up to 25% travel - Occasional lifting and/or moving up to 10 pounds. - Duties are performed in an office, hybrid or remote work setting. Securitas is committed to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, pregnancy, genetic information, disability, status as a protected veteran, or any other applicable legally protected characteristic.