Cyber Security Program Manager
About the Role
As a Cybersecurity Program Manager, you will support enterprise-wide security awareness initiatives designed to reduce human-centered cybersecurity risk. This role combines social engineering testing, employee education, program coordination, data analysis, and stakeholder engagement to strengthen security behaviors across the organization. You will help plan and execute phishing, vishing, smishing, and other simulated social engineering campaigns, provide coaching and training to employees, and analyze campaign results to identify trends and opportunities for improvement. This position is ideal for someone who enjoys blending cybersecurity knowledge with communication, training, analytics, and program management.
Responsibilities
- Plan and coordinate enterprise social engineering testing campaigns, including phishing, vishing, smishing, QR-code phishing, credential harvesting, and impersonation scenarios
- Develop campaign schedules, target groups, testing approaches, communications, and supporting documentation
- Coordinate required approvals and collaborate with security, compliance, communications, and business stakeholders
- Deliver virtual and in-person cybersecurity awareness training to employees and business teams
- Provide timely coaching and education following simulated social engineering interactions
- Develop awareness materials and communications designed to reinforce positive security behaviors
- Support administration of phishing and social engineering testing platforms
- Analyze campaign performance, user behavior, and security awareness trends
- Track metrics such as reporting rates, interaction rates, training completion, remediation activity, and overall campaign effectiveness
- Build dashboards, scorecards, and executive reports using Power BI, Excel, or similar tools
- Present program findings and recommendations to leadership and business stakeholders
- Support continuous improvement of cybersecurity awareness and employee engagement programs
- Maintain program documentation, operating procedures, schedules, and campaign records
- Participate in cross-functional security initiatives and special projects
- Collaborate with leaders and employees to strengthen security culture across the organization
Requirements
- Bachelor's degree or equivalent professional experience
- 3+ years of experience in cybersecurity awareness, security training, communications, program management, risk management, cybersecurity operations, or a related field
- Working knowledge of phishing, vishing, social engineering tactics, and common cybersecurity threats
- Experience delivering training, presentations, or educational programs to business audiences
- Experience coordinating programs, projects, or campaigns involving multiple stakeholders
- Strong written and verbal communication skills
- Ability to translate technical security concepts into clear information for non-technical audiences
- Strong analytical and organizational skills with the ability to manage multiple priorities
- Experience tracking program metrics and analyzing performance data
- Proficiency with Microsoft Excel, PowerPoint, Word, and Teams
Preferred Qualifications
- Experience managing phishing or social engineering simulation programs
- Experience with security awareness platforms such as KnowBe4, Proofpoint, Cofense, Mimecast, or similar tools
- Experience developing or supporting vishing, smishing, or impersonation testing programs
- Experience with Power BI and executive-level dashboard development
- Knowledge of adult learning, customer engagement, or behavior change principles
- Experience supporting cybersecurity programs within utility, energy, critical infrastructure, or other regulated environments
- Experience developing executive communications and security awareness campaigns
- Cybersecurity certifications such as Security+, CISSP, CISM, or similar credentials
- Experience partnering with security, compliance, risk management, communications, and business teams
Pay
$102,572 – $146,266/year
Schedule
Contract (1 Year+)