Information Security Awareness and Training Specialist

Job Description Summary The Information Security Awareness Specialist is responsible for driving cyber security awareness and fostering a security-conscious culture across the organisation. Reporting to the Cyber Security Strategy, Awareness and Training Lead, the role focuses on delivering engaging training programmes, phishing simulations, and awareness campaigns that educate employees on cyber security best practices and emerging threats. Working closely with stakeholders across the business, the specialist will develop impactful communications and training materials, monitor programme effectiveness through reporting and analytics, and continuously improve awareness initiatives to enhance employee vigilance and support the organisation's overall cyber security strategy. Job Description Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Job Summary: The Information Security Awareness Specialist is responsible for driving cyber security awareness and fostering a security-conscious culture across the organisation. Reporting to the Cyber Security Strategy, Awareness and Training Lead, the role focuses on delivering engaging training programmes, phishing simulations, and awareness campaigns that educate employees on cyber security best practices and emerging threats. Working closely with stakeholders across the business, the specialist will develop impactful communications and training materials, monitor programme effectiveness through reporting and analytics, and continuously improve awareness initiatives to enhance employee vigilance and support the organisation's overall cyber security strategy. Your Key Responsibilities: Your responsibilities include, but not limited to: Coordinate and deliver cyber security awareness initiatives, training programmes, and educational campaigns that strengthen security culture across the organisation. Plan, execute, and analyse phishing simulation campaigns to assess employee awareness and improve resilience against cyber threats. Develop engaging security awareness content, including e-learning modules, presentations, newsletters, infographics, and communications materials. Deliver virtual and in-person training sessions tailored to different audiences, ensuring content is relevant, engaging, and effective. Track programme performance, analyse awareness and training metrics, and provide reporting and recommendations for continuous improvement. Partner with stakeholders across IT, Communications, HR, and business functions to align security messaging and maximise employee engagement. Maintain awareness resources, including SharePoint sites and communication channels, ensuring content remains current and aligned with emerging threats. Support…