Information Security Education and Awareness Manager

We’re currently recruiting for an Information Security Education and Awareness Manager to join our Information Security team to support the business in protecting our customers, staff and assets from harm. 

Job Type: Fixed Term Contract (12-months)

Location: This role could be based in either our Edinburgh, Telford or Wythall offices (which would change to our Birmingham city centre office later this year) with time spent working in the office and at home 

Flexible working: All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about Phoenix Flex here.

Closing Date: 29 July 2025 

Salary and benefits: £55,100 - £60,000 plus 16% target bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more

Who are we? 

We want to be the best place that any of our 6,600 colleagues have ever worked. 

We’re Phoenix Group, we’re a long-term savings and retirement business. We offer a range of products across our market-leading brands, Standard Life, SunLife, Phoenix Life and ReAssure. Around 1 in 5 people in the UK has a pension with us. We’re a FTSE 100 organisation that is tackling key issues such as transitioning our portfolio to net zero by 2050, and we’re not done yet. 

The role 

We’re currently recruiting for an Information Security Education and Awareness Manager to join our Information Security team to support the business in protecting our customers, staff and assets from harm. To provide an ongoing effective and engaging programme of security awareness. 

This is an ideal opportunity to bring creativity and flare to own, develop and deliver an engaging awareness programme to the organisation to help drive a strong security culture year on year.

Key Responsibilities:

• Accountable for the management and delivery of the information security education and awareness plan, collating and agreeing objectives from the Information Security Team and other stakeholders, such as information security Business Champions and line 2 information security teams.
• Responsible for the design, implementation, and management of engaging information security awareness training initiatives that convey key security messages to various audiences across the business, including the mandatory Computer Based Training courses.
• Creating educational materials such as news articles, newsletters, infographics, videos, and intranet content to communicate security best practices. Tailor awareness efforts based on identified risks, threat intelligence, and audit findings to address specific vulnerabilities.
• Planning and executing security awareness campaigns (e.g., Cyber Security Month activities, Roadshows, supporting phishing simulations) to promote a strong security culture.
• Management of the Information Security intranet site and its content along with the Viva Engage Community.
• Working with projects and change to support information security awareness messaging required to complement delivery and implementation.
• Responsible for measuring and reporting on the performance of the education and awareness programme at steering groups and business champion forums and recommending areas for improvement and topics for focus.
• Collaborate with internal teams (e.g., Internal Communications, Data Protection, IT) to align awareness initiatives with business objectives and ensure consistent messaging.
• Keeping abreast of emerging threats, trends and key information security risks within Phoenix and across the industry, recommending and targeting awareness messages to support management of these risks.
• Ensuring we meet the security education training and awareness requirements stated in the Information Security Standards.

What are we looking for?

ESSENTIAL

• Excellent communication skills, verbal and written with an ability to articulate complex security risks and concepts to a range of stakeholders across the business.
• Experience of developing innovative and engaging communications materials using a range of communication channels.
• Strong skills in delivering online and face to face presentations and training/education sessions in an effective and engaging manner.
• Excellent planning skills and a high level of organisation and discipline to meet specific target dates, objectives and budget.
• Ability to work with minimal supervision and to identify and act on issues which need to be escalated.
• Strong technical proficiency with Microsoft Office packages including SharePoint Online and other audio/visual solutions.

DESIRABLE

• Experience of working in the financial services environment.
• Knowledge of information security risks and controls

 We want to hire the whole version of you.

We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you. 

 If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best. 

We’re reviewing applications as they come in, so apply early to avoid missing out

Find out more about #LifeAtPhoenix 

• Guide for Candidates: thephoenixgroup.pagetiger.com/guideforcandidates
• Find or get answers from our colleagues: www.thephoenixgroup.com/careers/talk-to-us 

#LI-Hybrid

#LI-KW1