Security Training & Culture Lead

Responsible for shaping and embedding a strong security culture in cyber, physical and people across NPL. Lead initiatives that influence behaviour and reduce human-related risk in compliance with regulatory and customer requirement, ensuring all colleagues have the appropriate level of awareness, knowledge, and skills to manage security risks in alignment with our programmes security values and policies. 

Key responsibilities 

• Develop and implement a security culture strategy aligned with NPL values, business objectives, and security risk priorities.
• Champion a security-first mindset by leading initiatives, campaigns, and communications that make security relatable, actionable, and embedded in everyday work.
• Design and deliver continuous security awareness programmes, including e-learning, workshops, campaigns, and executive briefings. Complement annual mandatory training with “just-in-time” learning resources to keep colleagues informed, engaged and mitigate risk of security breaches through best practice.
• Identify gaps in security knowledge and behaviours and develop targeted interventions to address these risks effectively.
• Tailor training and awareness activities for different roles and risk profiles across the organisation.
• Create and track metrics to measure effectiveness of initiatives and drive positive behavioural change.
• Collaborate with corporate functions and major programmes (People Team, Communications, IT, Assurance, etc.) to align messaging and priorities.
• Act as a trusted advisor on embedding security into processes, procedures, and organisational culture.
• Provide subject matter expertise on human risk management, social engineering awareness, and behavioural change.
• Stay informed on best practices in security culture development, learning methodologies, and behavioural science.
• Responsible for taking reasonable duty of care for Health & Safety of themselves and of other persons who may be affected by their acts or omissions at work and always follow direct instructions given with regards to Health & Safety. 

Essential Skills & Experience

• Proven experience in developing and delivering security awareness and culture programmes within a complex organisation.
• Experience working within or closely with Government, defence, or other highly regulated environments.
• Strong understanding of cyber security principles, physical security, and human risk factors.
• Knowledge of behavioural science or change management methodologies to influence organisational behaviour.
• Excellent communication skills with the ability to translate technical security concepts into clear, engaging messages for diverse audiences.
• Experience in stakeholder engagement and collaboration across multiple business functions.
• Ability to design and measure metrics for cultural change and training effectiveness.
• Project management skills to plan, execute, and evaluate initiatives on time and within budget.

Desirable

• Professional certifications such as CISSP, CISM, or certifications in security awareness (e.g., SANS Security Awareness Professional).
• Background in communications, psychology, or organisational development.

Personal Attributes

• Collaborative communicator who builds strong relationships and influences others.
• Customer-focused with an ability to align security culture to organisational needs.
• Innovative and curious, bringing creative ideas to engage colleagues.
• Decisive and informed, confident in making evidence-based decisions.
• Driven and adaptable, committed to continuous improvement and learning.

• The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here - The measure of us - Overview

  NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme.

  At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we’re creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page.

  We are committed to the health and well-being of our employees. Flexible working and social activities are embedded in our culture to create a positive work-life balance, along with a broad range of rewards, benefits and recognition. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we’re always willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.