Senior Consultant/Manager Cyber Operate Awareness Training & Communications Specialist

About Deloitte

Deloitte is a global professional services firm recognized for its impact on clients, people, and society. The firm has received awards including Best Employer in the Middle East, Best Consulting Firm, and the Middle East Training & Development Excellence Award. Deloitte focuses on delivering innovative insights, solving complex challenges, and fostering sustainable growth, guided by shared values.

Role Overview

Deloitte is seeking a Senior Consultant/Manager, Cyber Operate Awareness Training & Communications Specialist, for a full-time position in Riyadh, Riyadh. This role involves developing and implementing cybersecurity awareness, training, and communication programs to build a strong cybersecurity culture across organizations. The ideal candidate will have 2-5 years of relevant experience.

Key Responsibilities

• Build a cybersecurity culture by fostering ownership across the workforce and executives, promoting a cybersecurity-first mindset, and engaging leaders as role models.
• Measure cybersecurity culture over time using surveys, behavior data, and reporting trends to identify areas for improvement.
• Design the cybersecurity awareness, training, and culture framework and multi-year strategy, aligning with NCA ECC requirements.
• Write and maintain awareness and training policies, procedures, and SOPs, including mandatory training rules and phishing simulation guidelines.
• Conduct audience analysis to understand risks, working patterns, and preferred communication channels for various groups.
• Design and facilitate cybersecurity tabletop exercises for executives, crisis management teams, and business units based on realistic scenarios.
• Design themed awareness campaigns on priority topics such as phishing, data protection, and safe use of AI tools.
• Produce engaging content in Arabic and English, including newsletters, videos, infographics, and intranet pages.
• Organize cybersecurity events such as awareness months, roadshows, and competitions.
• Design and deliver role-based training for all staff, executives, IT/OT teams, developers, and contractors.
• Build onboarding security training for new joiners and manage training content and assignments in the learning management system (LMS).
• Issue clear security advisories and alerts during active threats in coordination with the SOC and Corporate Communications.
• Plan and run phishing, smishing, and vishing simulations, with follow-up training for those who fail.
• Measure behavioral changes, such as click and report rates, incident reporting trends, and culture survey results.
• Report program results and trends to Governance and Performance Management teams and adjust plans based on data.
• Collaborate with HR on onboarding, mandatory training, and policy acknowledgment.
• Work with Corporate Communications on brand, tone, and channels for security messaging.
• Build a network of security champions across departments and sites.

Leadership Capabilities

• Demonstrates an understanding of the firm's purpose and values, exploring opportunities for impact.
• Committed to personal learning and development, acting as a brand ambassador.
• Understands expectations and takes personal accountability for performance.
• Actively develops effective communication and relationship-building skills.
• Understands how daily work contributes to team and business priorities.