Information Security Awareness and Training Specialist

Job description

Job Description Summary The Information Security Awareness Specialist is responsible for driving cyber security awareness and fostering a security-conscious culture across the organisation. Reporting to the Cyber Security Strategy, Awareness and Training Lead, the role focuses on delivering engaging training programmes, phishing simulations, and awareness campaigns that educate employees on cyber security best practices and emerging threats. Working closely with stakeholders across the business, the specialist will develop impactful communications and training materials, monitor programme effectiveness through reporting and analytics, and continuously improve awareness initiatives to enhance employee vigilance and support the organisation's overall cyber security strategy. Job Description Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Job Summary: The Information Security Awareness Specialist is responsible for driving cyber security awareness and fostering a security-conscious culture across the organisation. Reporting to the Cyber Security Strategy, Awareness and Training Lead, the role focuses on delivering engaging training programmes, phishing simulations, and awareness campaigns that educate employees on cyber security best practices and emerging threats. Working closely with stakeholders across the business, the specialist will develop impactful communications and training materials, monitor programme effectiveness through reporting and analytics, and continuously improve awareness initiatives to enhance employee vigilance and support the organisation's overall cyber security strategy. Your Key Responsibilities: Your responsibilities include, but not limited to: Coordinate and deliver cyber security awareness initiatives, training programmes, and educational campaigns that strengthen security culture across the organisation. Plan, execute, and analyse phishing simulation campaigns to assess employee awareness and improve resilience against cyber threats. Develop engaging security awareness content, including e-learning modules, presentations, newsletters, infographics, and communications materials. Deliver virtual and in-person training sessions tailored to different audiences, ensuring content is relevant, engaging, and effective. Track programme performance, analyse awareness and training metrics, and provide reporting and recommendations for continuous improvement. Partner with stakeholders across IT, Communications, HR, and business functions to align security messaging and maximise employee engagement. Maintain awareness resources, including SharePoint sites and communication channels, ensuring content remains current and aligned with emerging threats. Support organisation-wide awareness campaigns and events, promoting cybersecurity best practices and driving participation across the business. What you’ll bring to the role: Essential Requirements: Proven experience developing and delivering training, awareness programmes, or educational content within a corporate environment. Experience facilitating training sessions, workshops, or user engagement activities for diverse audiences. Practical experience running phishing simulation campaigns and analysing results, ideally using platforms such as KnowBe4, Proofpoint, or similar. Strong content creation skills with the ability to develop engaging communications, presentations, and awareness materials. Excellent communication, stakeholder management, and collaboration skills with the ability to influence behaviours across the organisation. Strong analytical and reporting capabilities, including experience monitoring programme effectiveness and identifying improvement opportunities. Ability to manage multiple initiatives in a fast-paced environment while maintaining high standards of quality and delivery. Experience within cyber security, information security awareness, or a regulated industry such as healthcare, pharmaceuticals, or life sciences is advantageous. Qualifications Degree in Information Security, Cyber Security, Information Technology, Communications, Education, Business, or a related discipline preferred. Experience using security awareness and phishing simulation platforms such as KnowBe4, Proofpoint, or similar solutions. Proficiency in Microsoft Office tools, particularly PowerPoint, for creating professional and engaging training materials. Knowledge of cyber security threats, secure behaviours, and security awareness best practices. Strong training and facilitation skills with the ability to engage both technical and non-technical audiences. Experience creating branded communications, educational content, and awareness campaigns. Strong analytical, reporting, and continuous improvement mindset. Fluent English, both written and spoken. Why Sandoz? Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more! With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably. Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported! Join us! Skills Desired Communication Skills, Compliance Audits, Compliance Management, Compliance Risk Assessment, Compliance Training, Influencing Skills, Quality Assurance