Security Awareness Program Manager

We are engineers, high line workers, power plant managers, accountants, electricians, project coordinators, risk analysts, customer service operators, community representatives, safety and security specialists, communicators, human resources partners, information technology technicians and much, much more. We are 3,500 people committed to enhancing the lives of the communities we serve. Together, we are powering the growth and success of our community progress every day!

Position Summary

The Security Awareness Program Manager is responsible for developing, executing, and continuously improving an enterprise-wide security awareness and training program that integrates cybersecurity and physical security. This individual leads efforts to promote a culture of security, accountability, and vigilance across the company’s employees and contractors by aligning training content with national standards, internal values, and emerging threats. Reporting to the Director of Security Resilience and Intelligence, the Program Manager collaborates cross-functionally within CPS Energy as well as oversees and coordinates external experts to ensure the workforce is performing their duties and responsibilities in defending, detecting, and responding to evolving security risks. This role requires strategic vision, instructional design expertise, and strong communication skills to deliver impactful, engaging learning experiences—supported by metrics that inform leadership at all levels.

Grade: 17

Deadline to apply: 8/18/2025

Tasks And Responsibilities

- Lead the design and execution of an enterprise-wide security awareness program.

- Source and coordinate guest speakers, subject matter experts, and external partners to deliver specialized security and safety training.

- Coordinate and lead security-related events and campaigns, including Cybersecurity Awareness Month and internal communications.

- Continuously improve training effectiveness by aligning with evolving threats, regulatory standards (e.g., ISTE, NIST, DHS, NERC CIP), and internal risk insights.

- Collaborate with Governance teams, Threat Intelligence, Risk, and Incident Management teams to ensure accurate, timely, and technically deep training content.

- Demonstrate strong ability to influence and persuade others, effectively guiding them to shift perspectives and take meaningful actions.

- Exhibit proficiency across diverse communication methods, including in-person instruction, written narrative, computer-based training (CBT) development, social influencer strategies, and gamification.

- Forge relationships with business units to promote Integrated Security equities and build awareness within the enterprise.

- Develop and manage training schedules, enrollment tracking, attendance, LMS integration, and reporting.

- Build, curate, and maintain training materials and systems, including participant/facilitator guides, assessments, e-learning content, and visual aids.

- Measure program impact through assessments, simulations (e.g., phishing), and performance based KPIs; provide reports to executive stakeholders.

- Apply adult learning theory to design and deliver training through various media (instructor-led, eLearning, webinars, simulations).

- Conduct training needs assessments, analyze performance gaps, and customize learning solutions for diverse roles and teams.

- Market and promote awareness initiatives through internal channels, aligned with corporate values and safety culture.

- Collaborate, coach, and support internal training staff, ensuring consistency in delivery and instructional quality.

- Evaluate and implement new training technologies, benchmarking best practices to evolve the program.

Minimum Skills

Minimum Knowledge and Abilities

Knowledge of cybersecurity and physical security principles, including best practices, risk mitigation, and standards alignment.

Strong instructional design expertise with demonstrated use of adult learning theory and performance-based training.

Ability to manage training logistics end-to-end, including scheduling, documentation, LMS use, and post-training support.

Excellent communication and interpersonal skills, with the ability to engage audiences from frontline staff to board members.

Mastery of the English language for clear and effective communication in verbal and written forms.

Experience facilitating workshops and training courses, both in-person and virtually.

Strong organizational and multitasking abilities, capable of managing multiple initiatives concurrently.

Comfort working in ambiguous environments, with creative problem-solving and strong initiative.

Proficiency in Windows and Microsoft 365/Cloud applications, including SharePoint, Teams, and Excel for reporting.

Ability to work independently with minimal supervision, and flex to off-hours if required for training events.

Preferred Qualifications

- Master’s degree in Business, Education, Communication, or Cybersecurity with a strong emphasis on grammar and writing skills, curriculum development, instructional design.

- Relevant professional certifications, such as CISSP, SSAP, APTD, CPTD, or state/national teaching credentials.

- Experience leading a security awareness or training program within a regulated or critical infrastructure environment.

- Experience in the energy or utilities sector, or in other highly regulated industries.

- Knowledge of LMS platforms and course authoring tools, including SCORM, xAPI, or equivalent.

- Demonstrated success developing and implementing multi-format training (classroom, CBT, e-learning, mobile).

- Experience sourcing and managing external training vendors and speakers.

- Strong influence and relationship-building skills, particularly with executives and cross-functional stakeholders.

- Track record of embedding training into organizational processes, driving behavior change and culture transformation.

Competencies

Demonstrating Initiative

Builds Networks

Delivering High Quality Work

Evaluating and Implementing Ideas

Resolving Conflict

Communicates Effectively

Minimum Education

Bachelor’s degree in Business, Education, Communication, or Cybersecurity with a strong emphasis on grammar and writing skills, curriculum development, instructional design.

Required Certifications Working Environment

Indoor and outdoor work, operating computer, manual dexterity, talking, hearing, repetitive motion. Use of computing equipment, presentation equipment, telephone, and multi-functioning printer.

Ability to travel to and from meetings, training sessions or other business-related events. After hours work may be required.

Physical Demands

Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body.

Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

CPS Energy does not discriminate against applicants or employees. CPS Energy is committed to providing equal opportunity in all of its employment practices, including selection, hiring, promotion, transfers and compensation, to all qualified applicants and employees without regard to race, religion, color, sex, sexual orientation, gender identity, national origin, citizenship status, veteran status, pregnancy, age, disability, genetic information or any other protected status. CPS Energy will comply with all laws and regulations.