ZS Associates—Security Awareness & Training Specialist

Job description

Description: ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side-by-side with a powerful collective of thinkers and experts shaping life-changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client-first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life-changing impact to ZS. What You'll Do: Security Awareness & Training Specialist (Human Risk Management Program Lead) in Enterprise will own and advance enterprise programs that reduce human-related cybersecurity risk and strengthen security culture. This role will drive strategy, governance, awareness, behavior change, phishing resilience, role-based learning, risk measurement and continuous improvement across the employee lifecycle. The ideal candidate will bring strong program leadership, data-driven decision-making, executive communication and cross-functional partnership skills to help shift the organization from reactive awareness to proactive, measurable risk reduction. - Own the Human Risk Management strategy, roadmap and operating model, aligning awareness, behavior-change and risk-reduction initiatives with enterprise security priorities. - Design and scale enterprise-wide security awareness programs, including mandatory training, phishing resilience, role-based education, targeted interventions, reinforcement campaigns and employee engagement initiatives. - Lead phishing resilience programs, including simulation strategy, real-world reporting analysis, difficulty calibration, high-risk cohort management, repeat-clicker remediation and new-joiner education. - Drive role-based cybersecurity education for technical and business audiences, including secure coding awareness, developer engagement, compliance tracking, targeted communications and reinforcement activities. - Manage annual mandatory security training programs from launch through closure, including enrollment, reminders, exception handling, escalation, dashboard visibility, containment coordination, recognition and audit evidence. - Define and operationalize human risk metrics, dashboards and reporting to measure program effectiveness, behavior change, risk reduction, completion rates, phishing trends, secure coding compliance and business impact. - Partner with SOC, Incident Response, Security Architecture, GRC, HR, Legal, Technology and business teams to identify behavioral patterns, threat trends and human-risk signals, then convert those insights into proactive education, controls and remediation plans. - Lead HRM governance discussions, leadership meetings and executive updates by presenting progress, risks, decisions, success metrics, program maturity and the measurable impact delivered by the HRM team. - Evaluate, implement and optimize HRM platforms and capabilities, including requirements definition, vendor assessment, proof-of-value planning, behavior-signal mapping, privacy readiness, success criteria and adoption planning. - Build and sustain security culture initiatives, including ambassador or champion programs, office engagement, communication toolkits, regional feedback loops, and campaign-based awareness. - Use AI, automation and workflow optimization to streamline reporting, content creation, audience segmentation, campaign operations and insight generation while maintaining quality, privacy and governance standards. - Establish and maintain scalable program governance, including SOPs, RACI models, decision logs, evidence packs, audit-ready documentation and continuous-improvement practices. What You'll Bring: - Bachelor's degree in Information Security, Technology, Risk Management, Psychology, Organizational Behavior or a related discipline. - 5+ years of experience in cybersecurity, security awareness, human risk management, risk management, behavioral change, learning programs or related disciplines. - Proven experience leading enterprise-wide awareness, phishing, training, behavior-change or risk-reduction programs in a complex organization. - Strong program management skills with the ability to manage multiple initiatives, stakeholders, timelines, dependencies and operational risks. - Experience partnering with security, technology, HR, legal, compliance and business teams to translate risk insights into practical workforce interventions. - Ability to define success metrics, analyze program data, develop dashboards and communicate measurable business outcomes to leadership. - Excellent written and verbal communication skills, with the ability to simplify complex security topics for executive, technical and non-technical audiences. - Knowledge of cybersecurity concepts, security governance, risk management principles and workforce behavior-change practices. - Fluency in English - Client-first mentality - Intense work ethic - Collaborative spirit and problem-solving approach Preferred Qualifications - Experience implementing, administering or evaluating Human Risk Management, phishing simulation or security awareness platforms. - Experience with behavioral analytics, risk scoring, user segmentation, security culture measurement or human-risk reporting. - Familiarity with frameworks and models such as NIST CSF, ISO 27001, SANS Security Awareness Maturity Model or similar control and maturity frameworks. - Experience with dashboarding, reporting or data visualization tools such as Power BI, Excel or similar platforms. - Security or awareness-related certifications such as SSAP, Security+ or equivalent are preferred. How you’ll grow: - Cross-functional skills development & custom learning pathways - Milestone training programs aligned to career progression opportunities - Internal mobility paths that empower growth via s-curves, individual contribution and role expansions Perks & Benefits: At ZS, your growth matters. We offer a comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development. With robust skills‑building programs, multiple career progression paths, internal mobility, and a deeply collaborative culture, you’ll have the opportunity to do meaningful work, expand your capabilities, and thrive as part of a global community. For details on total rewards in India, visit ZS India office locations | Where we work | ZS. Hybrid working model: We are committed to giving our employees a flexible and connected way of working. A flexible and connected ZS allows us to combine work from home and on-site presence at clients/ZS offices for the majority of our week. The magic of ZS culture and innovation thrives in both planned and spontaneous face-to-face connections. Travel: Travel is a requirement at ZS for client facing ZSers; business needs of your project and client are the priority. While some projects may be local, all client-facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures. Considering applying? At ZS, we honor the visible and invisible elements of our identities, personal experiences, and belief systems—the ones that comprise us as individuals, shape who we are, and make us unique. We believe your personal interests, identities, and desire to learn are integral to your success here. We are committed to building a team that reflects a broad variety of backgrounds, perspectives, and experiences. Learn more about our inclusion and belonging efforts and the networks ZS supports to assist our ZSers in cultivating community spaces and obtaining the resources they need to thrive. If you’re eager to grow, contribute, and bring your unique self to our work, we encourage you to apply. ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law. To complete your application: Candidates must possess or be able to obtain work authorization for their intended country of employment. An on-line application, including a full set of transcripts (official or unofficial), is required to be considered. NO AGENCY CALLS, PLEASE. Find Out More At: www.zs.com Responsibilities: What You'll Do: Security Awareness & Training Specialist (Human Risk Management Program Lead) in Enterprise will own and advance enterprise programs that reduce human-related cybersecurity risk and strengthen security culture. This role will drive strategy, governance, awareness, behavior change, phishing resilience, role-based learning, risk measurement and continuous improvement across the employee lifecycle. The ideal candidate will bring strong program leadership, data-driven decision-making, executive communication and cross-functional partnership skills to help shift the organization from reactive awareness to proactive, measurable risk reduction. - Own the Human Risk Management strategy, roadmap and operating model, aligning awareness, behavior-change and risk-reduction initiatives with enterprise security priorities. - Design and scale enterprise-wide security awareness programs, including mandatory training, phishing resilience, role-based education, targeted interventions, reinforcement campaigns and employee engagement initiatives. - Lead phishing resilience programs, including simulation strategy, real-world reporting analysis, difficulty calibration, high-risk cohort management, repeat-clicker remediation and new-joiner education. - Drive role-based cybersecurity education for technical and business audiences, including secure coding awareness, developer engagement, compliance tracking, targeted communications and reinforcement activities. - Manage annual mandatory security training programs from launch through closure, including enrollment, reminders, exception handling, escalation, dashboard visibility, containment coordination, recognition and audit evidence. - Define and operationalize human risk metrics, dashboards and reporting to measure program effectiveness, behavior change, risk reduction, completion rates, phishing trends, secure coding compliance and business impact. - Partner with SOC, Incident Response, Security Architecture, GRC, HR, Legal, Technology and business teams to identify behavioral patterns, threat trends and human-risk signals, then convert those insights into proactive education, controls and remediation plans. - Lead HRM governance discussions, leadership meetings and executive updates by presenting progress, risks, decisions, success metrics, program maturity and the measurable impact delivered by the HRM team. - Evaluate, implement and optimize HRM platforms and capabilities, including requirements definition, vendor assessment, proof-of-value planning, behavior-signal mapping, privacy readiness, success criteria and adoption planning. - Build and sustain security culture initiatives, including ambassador or champion programs, office engagement, communication toolkits, regional feedback loops, and campaign-based awareness. - Use AI, automation and workflow optimization to streamline reporting, content creation, audience segmentation, campaign operations and insight generation while maintaining quality, privacy and governance standards. - Establish and maintain scalable program governance, including SOPs, RACI models, decision logs, evidence packs, audit-ready documentation and continuous-improvement practices. What You'll Bring: - Bachelor's degree in Information Security, Technology, Risk Management, Psychology, Organizational Behavior or a related discipline. - 5+ years of experience in cybersecurity, security awareness, human risk management, risk management, behavioral change, learning programs or related disciplines. - Proven experience leading enterprise-wide awareness, phishing, training, behavior-change or risk-reduction programs in a complex organization. - Strong program management skills with the ability to manage multiple initiatives, stakeholders, timelines, dependencies and operational risks. - Experience partnering with security, technology, HR, legal, compliance and business teams to translate risk insights into practical workforce interventions. - Ability to define success metrics, analyze program data, develop dashboards and communicate measurable business outcomes to leadership. - Excellent written and verbal communication skills, with the ability to simplify complex security topics for executive, technical and non-technical audiences. - Knowledge of cybersecurity concepts, security governance, risk management principles and workforce behavior-change practices. - Fluency in English - Client-first mentality - Intense work ethic - Collaborative spirit and problem-solving approach Preferred Qualifications - Experience implementing, administering or evaluating Human Risk Management, phishing simulation or security awareness platforms. - Experience with behavioral analytics, risk scoring, user segmentation, security culture measurement or human-risk reporting. - Familiarity with frameworks and models such as NIST CSF, ISO 27001, SANS Security Awareness Maturity Model or similar control and maturity frameworks. - Experience with dashboarding, reporting or data visualization tools such as Power BI, Excel or similar platforms. - Security or awareness-related certifications such as SSAP, Security+ or equivalent are preferred.