Security Awareness Program Manager

The Security Awareness Program Manager is responsible for developing, implementing, and managing a comprehensive security awareness and training program to educate the organization’s workforce on information and physical security best practices to promote and strengthen a culture of security awareness while reducing risk across the organization.

This role collaborates closely with QTS Intelligence, Information Security, and Physical Security Teams to understand risks associated with cyber-attacks and physical threats to QTS operations, personnel, and facilities. The Security Awareness Program Manager will provide training and communications that will play a vital role in accelerating knowledge to protect the organization's assets while continuously evolving the awareness program.

The Security Awareness Program Manager reports to the Vice President, Security Risk & Compliance and can be in any of these three QTS locations:  Overland Park, Kansas; Suwanee, Georgia; or Ashburn, Virginia. This position will require up to 10% travel to QTS data center and office locations as required. The ideal candidate will have a technical background and a broad base of experience in cyber security, physical security, and training.

RESPONSIBILITIES:

Program Development and Strategy

• Design, execute, and mature a global security awareness strategy aligned with organizational risk and compliance goals.

• Collaborate with QTS Learning and Development to develop engaging training content, campaigns, and communications tailored to dissimilar roles and regions.

• Establish metrics (e.g., training completion rates, phishing simulation results, and incident reporting rates) to measure program effectiveness and continuously improve based on feedback and performance.

• Understand and prepare risk gap analysis to ensure program maturity continues and awareness improves.

• Manage QTS Security Awareness Training platform.

Training and Communication

• Deliver regular security awareness training, phishing simulations, and targeted education initiatives on ransomware, social engineering, insider threat, and physical security through the QTS Security Awareness Training platform

• Collaborate with Corporate Communications, Human Resources, and IT to promote security culture through newsletters, posters, videos, and events.

• Create role-based training for high-risk groups (e.g., finance, developers, executives).

• Lead the planning and execution of the QTS National Cyber Security Awareness Month activities in October of each year.

Risk Reduction and Behavior Change

• Analyze phishing simulation results and other behavioral metrics to identify trends and areas for improvement.

• Assess organizational risk to identify areas where human behavior could expose the organizations to threats (e.g., weak passwords and mishandling sensitive information).

• Partner with Risk and Compliance teams to align awareness efforts with audit and regulatory requirements (e.g., GDPR, SOC, ISO 27001, ISO 22301, and PCI).

• Promote secure behaviors through gamification, recognition programs, and behavioral nudges.

Stakeholder Engagement

• Act as a trusted advisor to business units, helping them understand and mitigate human-related security risks.

• Present program impact, updates, and metrics to senior leadership and Security Executive Committee.

• Stay current on emerging threats, trends, and best practices in security awareness and human risk management.

BASIC QUALIFICATIONS:

• Bachelor’s degree in Cybersecurity, Communications, Education, or related field.

• Five plus years of experience in security awareness, training, or communications within a corporate environment.

• Strong understanding of cybersecurity principles, threats, and compliance frameworks.

• Experience with security awareness platforms (e.g., KnowBe4, Proofpoint, Living Security).

• Excellent communication, storytelling, and project management skills.

• Ability to influence and engage stakeholders at all levels.

 <