CyberSécurity Awarness

Nous recherchons pour l'un de nos clients industriels dans un contexte internationnal un CyberSécurity Awarness sur la défense.

Purpose

The Cybersecurity Awareness, Communication & Culture Officer defines and implements the Group's cybersecurity awareness, communication and culture activities. The role builds and executes the awareness & communication roadmap produces communication and training content (increasingly AI-assisted) runs phishing simulation campaigns supports incident communication and prepares cybersecurity reporting and materials for business entities and top management.

The role works transversally, with the SOC, Incident Management, digital learning/LMS, IT and the CISO, across multiple regions. It is an individual-contributor position (no direct reports) that also animates the team and the community of industrial cyber-correspondents.

Areas of responsibility

1. Communication & content

• Produce and publish internal cybersecurity communications across Group channels (Viva Engage, SharePoint, email): infographics, articles, videos, guides.
• Draft incident communications to employees and create Incident Cards referencing notable incidents.
• Create and maintain the cybersecurity Golden Rules.
• Run Cybermonth (the annual cybersecurity awareness month).
• Animate the community of industrial cyber-correspondents (bi-monthly webinars, monthly communications).

2. Awareness, culture & roadmap

• Define and drive the Cybersecurity Awareness & Communication Roadmap (set at year-end, executed through the year, reviewed weekly with the CISO).
• Build a lasting security culture across the employee population.
• Extend awareness and anti-fraud actions to newly acquired entities.

3. Training & e-learning

• Create e-learning modules (SCORM), using AI to accelerate content production.
• Maintain and evolve the AI awareness curriculum and add new modules as needed.
• Coordinate with the digital-learning / LMS team on dedicated learning paths and follow up training completion.

4. Phishing simulation

• Run phishing simulation campaigns on the dedicated platform.
• Report and analyze results to the Comex after each campaign.

5. Reporting & management support

• Prepare management-committee materials and support the CISO on presentations and content.

6. Operational

• Own cybersecurity crisis exercises.
• Administer the corporate password vault.
• Run communication-provider tenders (RFPs) providers are selected per tender.

Expected results 

• A defined and executed awareness & communication roadmap, endorsed by the CISO.
• Regular, high-quality multi-channel cybersecurity communication and a measurable improvement in security culture across the Group employee population.
• Around 9 phishing simulation campaigns per year, delivered with Comex-level reporting and analysis.
• Up-to-date cybersecurity e-learning and a maintained AI awareness curriculum.
• Monthly cybersecurity KPI reporting to business and management, and committee-ready materials.
• Cyber awareness and anti-fraud effectively extended to newly acquired entities

Required skills and qualifications

• Senior communication professional, minimum of 5 years’ experience, able to operate as an individual contributor with senior stakeholders.
• Strong content skills, both wording and graphics: infographics, video, guides and management-committee slides.
• Able to leverage AI to produce communication content and training modules is a plus.
• Cybersecurity awareness and phishing as a key requirement, with hands-on experience using a phishing simulation platform
• French & English fluent
• Ability to run cybersecurity crisis exercises campaigns is a plus