Cyber Security Culture & Awareness Expert

About the Role:

The Cyber Culture & Awareness Expert is responsible for supporting the fostering of a Cyber Culture among all Ferrero employees. They support the development of plans and help coordinate and deliver cybersecurity projects and services, aimed at enabling cybersecurity awareness and training programs. They ensure, along with the Cyber Culture & Awareness Manager, that appropriate awareness campaigns for all personnel are developed and coordinated to increase the cybersecurity knowledge, skills, best practices, experience and qualifications of all employees.

Main Responsibilities:

  • As part of the Asia Hub, the CS Culture & Awareness Expert will manage requests and needs originating from the area, planning activities, resources and assurance activities, to ensure continuous improvement of the area’s posture
  • Improve and collaborate on the definition of an awareness program, completing task and producing content as to implement security awareness and training initiatives to reach target audiences through appropriate channels (digital media, print media, training, events, etc.)
  • Collect local needs for Cybersecurity Trainings, understanding relevant audiences and processes to secure
  • Develop tailored cybersecurity role-based learning paths, design courses that are foundational to desired secure behaviours in compliance with security policies, procedures and standards, as well other courses to be developed and deployed in connection with enterprise risk management or security risk assessment findings and remediation
  • Collect feedback, comments, suggestions and impressions from all employees, as engaged in the various awareness and training activities, for the evolution and improvement of Cyber Culture initiatives
    Spread Cybersecurity culture in the covered regions through news, bulletins and how-tos
  • Create and deliver at local level awareness initiatives, supporting/reviewing the translation and localization contents
  • Measure and evaluate the impact/effectiveness and comprehensiveness of awareness and training initiatives, through adequate reports and results of tests and campaigns on the employees
  • Collect local needs for phishing campaigns to raise awareness and train specific audiences in the covered regions
  • Measure and evaluate the behaviours of users during Phishing Campaign simulations, developing effective reporting and monitoring their progress
  • Support the execution tabletop exercises, and the identification of appropriate scenarios for select audiences

About You:

  • Higher degree in technical sciences, social sciences or general scientific field, mainly: At bachelor level a BSc, BCs, BEng or BEng in (Corporate/Persuasive) Communication, Security Studies, Crisis Management, Behavioural Science/Psychology, Information Technology, or a related field
  • 8+ years of experience in a similar position or in cybersecurity consultancy
  • General Knowledge of main cybersecurity topics to tailor awareness, communication and training material for the Group or specific target audience.
  • Basic understanding of adult learning and organizational change principles and theories, such as experiential learning, self-directed learning, and daring learning.
  • Understanding of basic engagement principles in communication and awareness campaigns as well as in the creation of corporate trainings, such as gamification or interactive learning.
  • General knowledge of communication activities to be put in place to further enhance the response to cybersecurity incidents.
  • General knowledge of Cybersecurity international standards, law and regulations (e.g. ENISA, NIST, ISO27000).
  • Business fluent written and spoken English language skills; Any other language is considered a plus.
  • Outstanding analytical and conceptual skills
  • Problem-solving and research-driven attitude when faced with challenges and difficulties
  • Ability to adequately communicate in a complex business context
  • Ability to manage autonomous work assignments while efficiently aligning with Cybersecurity and IT on specific requests.  


Job Referral Code - B

What We Offer:

Careers with caring built in - discover our benefits here.

About Ferrero:

Ferrero began its journey in the small town of Alba in Piedmont, Italy, in 1946. Today, it is one of the world’s largest sweet-packaged food companies, with many iconic brands sold in countries all over the world. Find out more about Ferrero at ferrero.com.

DE&I at Ferrero:

Ferrero is committed to building a diverse and inclusive culture in which all employees feel welcomed and appreciated and have the same opportunities. We believe all our people are equally talented in their own way. In nurturing the curiosity and natural abilities of our employees, we provide them, generation after generation, the means to succeed personally and professionally, enabling them to craft their journey at Ferrero. The diversity of our talents is what makes our work environment multicultural, innovative, and highly rewarding.
Find out more here.