Change Manager - Cyber Security
Role Overview
We are seeking an experienced and engaging Cyber Change Manager to lead and embed meaningful behavioural change across the organisation. This role requires more than traditional change, training, or communications expertise — it demands a person who can genuinely influence how people think, act, and behave in their day-to-day work when it comes to cyber security.
The successful candidate will either have led a cyber-focused change management programme or be a highly capable change professional with strong cyber exposure and credibility. You will work closely with operational teams to ensure cyber security is not seen as an abstract concept, but as a natural and embedded part of everyday working practices.
Key Objective
To drive real, measurable behavioural change that embeds cyber-secure practices into daily activities across all roles — ensuring security becomes routine, practical, and instinctive rather than optional.
Key Responsibilities
Behavioural Change & Engagement
- Design and deliver change approaches that drive true understanding and sustained behavioural change, not just awareness.
- Engage directly with teams across the organisation to understand how work is actually performed in real-world environments.
- Develop inclusive, practical, and engaging interventions that resonate with frontline and office-based staff alike.
- Act as a visible and credible advocate for secure behaviours, building trust and engagement at all levels.
Cyber Risk in Everyday Work
- Analyse day-to-day activities across a wide range of roles to identify where cyber risks exist in real working practices.
- Translate cyber security principles into practical, role-specific behaviours (e.g. secure handling of devices, data protection in field environments).
- Ensure cyber protocols are realistic, achievable, and embedded into existing workflows.
Design & Implementation
- Create innovative change solutions that go beyond standard training and communications.
- Embed cyber security practices into everyday tasks so that secure behaviour becomes habitual.
- Partner with Cyber Security, IT, and business teams to align behavioural change initiatives with technical controls and policies.
Measurement & Reinforcement
- Define and track metrics to measure adoption, behavioural change, and effectiveness.
- Report clearly on progress, risks, and successes to stakeholders.
- Publicise and reinforce examples of strong cyber practices, celebrating teams and individuals who demonstrate secure behaviours.
Skills & Experience Required
Essential
- Proven experience leading change management initiatives, ideally within Cyber Security, IT Risk, or Information Security environments.
- OR
- Strong change management background with demonstrable cyber exposure and the credibility to operate confidently with cyber professionals.
- Deep understanding of behavioural change principles and how to apply them in complex organisations.
- Ability to engage and influence a wide range of stakeholders, including frontline staff, technical teams, and leadership.
- Strong analytical skills with the ability to identify real-world risks and practical solutions.
- Excellent communication skills, with the presence and personality to genuinely connect with people.
Desirable
- Experience working with operational or field-based roles.
- Knowledge of cyber security risks, controls, and best practices.
- Background in human-centred design, behavioural science, or similar disciplines.