National Physical Laboratory (NPL)
Security Awareness and Culture Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role Overview
Responsible for shaping and embedding a strong security culture in cyber, physical and people across NPL. Lead initiatives that influence behaviour and reduce human-related risk in compliance with regulatory and customer requirement, ensuring all colleagues have the appropriate level of awareness, knowledge, and skills to manage security risks in alignment with our programmes security values and policies.
Key Responsibilities
- Develop and implement a security culture strategy aligned with NPL values, business objectives, and security risk priorities.
- Champion a security-first mindset by leading initiatives, campaigns, and communications that make security relatable, actionable, and embedded in everyday work.
- Design and deliver continuous security awareness programmes, including e-learning, workshops, campaigns, and executive briefings. Complement annual mandatory training with “just-in-time” learning resources to keep colleagues informed, engaged and mitigate risk of security breaches through best practice.
- Identify gaps in security knowledge and behaviours and develop targeted interventions to address these risks effectively.
- Tailor training and awareness activities for different roles and risk profiles across the organisation.
- Create and track metrics to measure effectiveness of initiatives and drive positive behavioural change.
- Collaborate with corporate functions and major programmes (People Team, Communications, IT, Assurance, etc.) to align messaging and priorities.
- Act as a trusted advisor on embedding security into processes, procedures, and organisational culture.
- Provide subject matter expertise on human risk management, social engineering awareness, and behavioural change.
- Stay informed on best practices in security culture development, learning methodologies, and behavioural science.
- Responsible for taking reasonable duty of care for Health & Safety of themselves and of other persons who may be affected by their acts or omissions at work and always follow direct instructions given with regards to Health & Safety.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
Essential Skills & Experience
- Proven experience in developing and delivering security awareness and culture programmes within a complex organisation.
- Experience working within or closely with Government, defence, or other highly regulated environments.
- Strong understanding of cyber security principles, physical security, and human risk factors.
- Knowledge of behavioural science or change management methodologies to influence organisational behaviour.
- Excellent communication skills with the ability to translate technical security concepts into clear, engaging messages for diverse audiences.
- Experience in stakeholder engagement and collaboration across multiple business functions.
- Ability to design and measure metrics for cultural change and training effectiveness.
- Project management skills to plan, execute, and evaluate initiatives on time and within budget.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Professional certifications such as CISSP, CISM, or certifications in security awareness (e.g., SANS Security Awareness Professional).
- Background in communications, psychology, or organisational development.
Personal Attributes
- Collaborative communicator who builds strong relationships and influences others.
- Customer-focused with an ability to align security culture to organisational needs.
- Innovative and curious, bringing creative ideas to engage colleagues.
- Decisive and informed, confident in making evidence-based decisions.
- Driven and adaptable, committed to continuous improvement and learning.
Additional Information
We actively recruit citizens of all backgrounds, but the nature of our work in specific departments means that nationality, residency and security requirements can be more tightly defined than others. You will be asked about this throughout the recruitment process. To work at NPL, you will need to obtain BPSS security clearance.
You will need to have an SC clearance with no restrictions, or you must have the ability to obtain an SC clearance.
This is a hybrid working role, and is split between 3 days on-site and 2 days WFH.
Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London