Principal Security Awareness & Human Risk Engineer

Responsibilities

We are representing a confidential SaaS organization seeking a Principal Security Awareness & Human Risk Engineer to own and advance their global security awareness program. This strategic individual contributor role sits within the Security Assurance function and drives measurable reduction in human-related security risk through sustained behavior change and embedded security culture.

In this role, you will:

• Own and evolve the global security awareness and education program, spanning annual training, new-hire onboarding, role-based learning, targeted campaigns, executive engagement, and microlearning content
• Lead the phishing simulation program end to end, including design, deployment, analysis, and targeted follow-up interventions
• Apply behavior change principles to reinforce secure habits and address priority risk behaviors across the organization
• Build and sustain security culture through learning campaigns, Security Awareness Month initiatives, and ongoing engagement activities
• Produce multimedia awareness and education content, including video production
• Administer training and phishing platforms, owning program data, analytics, and reporting end to end
• Define and report performance indicators and risk metrics to Security Assurance leadership
• Own vendor relationships for phishing simulation, secure coding training, and video production services
• Lead market and competitor evaluations, renewal decisions, and cost negotiation, recommending build-versus-buy decisions where commercial options underperform
• Collaborate on and maintain security policies, standards, and procedures
• Coordinate audit evidence and demonstrate control effectiveness for compliance frameworks
• Track remediation of identified gaps through to closure

What We're Looking For

• A minimum of 10 years' experience building or scaling global security awareness and human-risk programs in large, globally distributed enterprises, with measurable outcomes; regulated-industry experience preferred
• SANS Security Awareness Professional (SSAP) certification, or equivalent demonstrated expertise in building, maintaining, and measuring a mature awareness program
• Demonstrated experience running enterprise-scale phishing programs and organization-wide awareness campaigns
• Track record of evaluating, selecting, consolidating, or replacing security training vendors, including cost and value analysis
• Instructional design capability to create engaging, effective learning experiences
• Working knowledge of security policy development, audit support, and control evidence preparation
• Ability to influence enterprise strategy across technical and non-technical teams without formal authority
• Ability to make complex security topics practical and engaging in an all-remote organization
• Track record of onboarding, managing, and negotiating with third-party vendors

How We Work With You

When you apply through Get A Job.ai, our talent team will carefully review your qualifications and experience. If there's a strong match, a recruiter will conduct an initial screening conversation to discuss your background, the role requirements, and what you're looking for in your next opportunity. We'll then submit qualified candidates to our client for consideration and guide you through their interview process. Please note that candidates should apply exclusively through Get A Job.ai and not contact the client directly.

Pay

This is a remote position available to candidates in the United States. No specific compensation has been provided for this role through Get A Job.ai at this time.

Equal Employment Opportunity: Get A Job.ai is committed to fair and equitable recruiting practices. We welcome candidates from all backgrounds and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic.