Cyber Security Education & Awareness Manager

Company: University of Oxford
Apply for the Cyber Security Education & Awareness Manager
Location:
Job Description:

Overview

As Cyber Security Education & Awareness Manager, you will shape the university’s security culture by designing and delivering education and behaviour-change initiatives. You will collaborate across faculties, professional services, and colleges to translate complex cyber risks into accessible training and guidance. Using data and phishing simulations, you’ll identify priorities, measure impact and drive improvements. This role offers autonomy to build a specialist function and influence secure practices across a large, decentralised institution.

Pay / Benefits

  • 38 days of annual leave
  • hybrid and flexible working
  • contributory pension scheme
  • family leave (maternity/adoption, paternity/partner)
  • commuting options (cycle loan, discounted travel, season ticket loans)
  • vibrant community through clubs

Responsibilities

  • Develop and deliver the cyber security education and behaviour-change strategy
  • Translate complex risk into training, campaigns and practical guidance
  • Engage senior leaders, academic colleagues, professional services and technical specialists to gain support for secure practices
  • Use phishing simulation results, engagement data and behavioural insights to prioritise, evaluate and improve outcomes
  • Shape a specialist function, advise senior stakeholders and develop colleagues
  • Establish a measurable, evidence-led approach to security awareness
  • Help embed secure behaviour into everyday university life

Key requirements

  • Degree-level education or equivalent professional experience in cyber security, IT, communications, organisational change, learning and development, education or related field
  • Substantial experience leading education, awareness, communications or behaviour-change programmes in complex organisations
  • Knowledge of cyber security principles, emerging threats and security behaviour-change approaches
  • Experience translating technical information into accessible training and guidance for diverse audiences
  • Strong stakeholder engagement, communication and influencing skills
  • Experience analysing data and feedback to evaluate effectiveness and drive improvements
  • Strong programme and project management skills, including managing priorities and dependencies
  • Experience managing or developing colleagues and handling sensitive information
  • stakeholder engagement
  • communication
  • influencing
  • cyber security principles
  • behaviour-change approaches
  • training design and delivery

…

Posted: October 22nd, 2026