Cybersecurity Awareness, Communication & Culture Officer

Position: Cybersecurity Awareness, Communication & Culture Officer

Organization 

• Function: Legal/Risk Management

• Country: France

• Location: Puteaux 

• Reports to (title): Group CyberSecurity Director

Context 

The Compagny has defined an organization, a framework and action plans to ensure and improve the protection level of its Information System (IT) and its Industrial environment (OT) against cyberthreats such as malware, intrusion from hackers, and fraud attempts.

The Cyber Security department is part of the Risk Management organization, with the objective of coordinating cybersecurity activities across the Compagny Business Groups.

To limit the number of cyber incidents and their impacts, people awareness and a strong, lasting security culture are among the key processes of Compagny cybersecurity framework.

Purpose

The Cybersecurity Awareness, Communication & Culture Officer defines and implements the Group's cybersecurity awareness, communication and culture activities. The role builds and executes the awareness & communication roadmap; produces communication and training content (increasingly AI-assisted); runs phishing simulation campaigns; supports incident communication; and prepares cybersecurity reporting and materials for business entities and top management.

The role works transversally, with the SOC, Incident Management, digital learning/LMS, IT and the CISO, across multiple regions. It is an individual-contributor position (no direct reports) that also animates the team and the community of industrial cyber-correspondents.

Areas of responsibility

1. Communication & content

o Produce and publish internal cybersecurity communications across Group channels (Viva Engage, SharePoint, email): infographics, articles, videos, guides.

o Draft incident communications to employees and create Incident Cards referencing notable incidents.

o Create and maintain the cybersecurity Golden Rules.

o Run Cybermonth (the annual cybersecurity awareness month).

o Animate the community of industrial cyber-correspondents (bi-monthly webinars, monthly communications).

2. Awareness, culture & roadmap

o Define and drive the Cybersecurity Awareness & Communication Roadmap (set at year-end, executed through the year, reviewed weekly with the CISO).

o Build a lasting security culture across the employee population.

o Extend awareness and anti-fraud actions to newly acquired entities.

3. Training & e-learning

o Create e-learning modules (SCORM), using AI to accelerate content production.

o Maintain and evolve the AI awareness curriculum and add new modules as needed.

o Coordinate with the digital-learning / LMS team on dedicated learning paths and follow up training completion.

4. Phishing simulation

o Run phishing simulation campaigns on the dedicated platform.

o Report and analyze results to the Comex after each campaign.

5. Reporting & management support

o Prepare management-committee materials and support the CISO on presentations and content.

6. Operational

o Own cybersecurity crisis exercises.

o Administer the corporate password vault.

o Run communication-provider tenders (RFPs); providers are selected per tender.

Expected results 

• A defined and executed awareness & communication roadmap, endorsed by the CISO.

• Regular, high-quality multi-channel cybersecurity communication and a measurable improvement in security culture across the Group employee population.

• Around 9 phishing simulation campaigns per year, delivered with Comex-level reporting and analysis.

• Up-to-date cybersecurity e-learning and a maintained AI awareness curriculum.

• Monthly cybersecurity KPI reporting to business and management, and committee-ready materials.

• Cyber awareness and anti-fraud effectively extended to newly acquired entities

Required skills and qualifications

• Senior communication professional, minimum of 5 years’ experience, able to operate as an individual contributor with senior stakeholders.

• Strong content skills, both wording and graphics: infographics, video, guides and management-committee slides.

• Able to leverage AI to produce communication content and training modules is a plus.

• Cybersecurity awareness and phishing as a key requirement, with hands-on experience using a phishing simulation platform

• French & English fluent

• Ability to run cybersecurity crisis exercises campaigns is a plus