Social Engineering Specialist

Cybersecurity Training & Awareness Lead

Location: Calgary, AB (Hybrid) Contract: 12 Month (Strong Possibility for Renewal)

About the Role

We are seeking a Security Awareness & Human Risk Management Lead to establish and mature an enterprise-wide human risk reduction program. This role will focus on strengthening employee security behaviors, reducing exposure to social engineering threats, and providing leadership with actionable insights into organizational security risk.

The successful candidate will lead phishing, vishing, smishing, and other awareness initiatives while collaborating with Cybersecurity, HR, Communications, Privacy, and business stakeholders to build a strong security culture across the organization.

Qualifications

Required

• Experience in Security Awareness, Human Risk Management, Cybersecurity Program Management, Information Security, GRC, or related fields.
• Experience designing or managing phishing simulation and security awareness programs.
• Strong understanding of social engineering threats, phishing, vishing, smishing, and emerging cyber attack techniques.
• Experience analyzing security awareness metrics and behavioral risk data.
• Strong communication and presentation skills with the ability to engage senior leaders and business stakeholders.
• Experience managing cross-functional initiatives in complex enterprise environments.

Preferred

• Experience with tools such as KnowBe4, Proofpoint, Cofense, Microsoft Defender for Office 365, or similar platforms.
• Experience building or scaling enterprise security awareness programs.
• Knowledge of AI-enabled threats, deepfakes, and emerging social engineering techniques.
• Experience within large enterprise or regulated environments.

Key Responsibilities

Human Risk & Security Awareness

• Design, develop, and manage enterprise-wide security awareness and human risk management programs.
• Build initiatives that improve employee understanding of cybersecurity threats and safe behaviors.
• Develop targeted awareness strategies for high-risk user groups and business functions.

Social Engineering Program Management

• Lead the planning and execution of phishing, vishing, smishing, and other social engineering simulations.
• Create realistic attack scenarios aligned to current threat intelligence and business risks.
• Continuously evolve testing approaches to address emerging threats, including AI-driven attacks and deepfake-based scams.

Analytics & Reporting

• Develop and maintain security awareness and human risk metrics.
• Analyze phishing and simulation results, including user behaviors, reporting rates, and risk trends.
• Produce executive dashboards and reports that provide visibility into organizational human risk.
• Present findings, recommendations, and program outcomes to senior leadership.

Stakeholder Collaboration

• Partner with Cybersecurity, HR, Privacy, Legal, Communications, and business teams to align awareness initiatives and response strategies.
• Act as the subject matter expert for social engineering and human-focused cyber risks.
• Support incident reviews and integrate lessons learned into awareness and training programs.

Ideal Backgrounds

• Security Awareness Manager
• Security Awareness Specialist
• Human Risk Management Lead
• Cybersecurity Program Manager
• Security Culture Lead
• Information Security Consultant
• Cybersecurity Training & Awareness Lead
• GRC Specialist