Deloitte
Awareness, Training and Communications Specialist, Cyber Operate (Senior Consultant / Manager)
- Permanent
- Riyadh, Saudi Arabia
- Experience 2 - 5 yrs
Job expiry date: 28/11/2026
Job overview
Date posted
14/10/2026
Location
Riyadh, Saudi Arabia
Salary
SAR 20,000 - 30,000 per month
Compensation
Comprehensive package
Experience
2 - 5 yrs
Seniority
Senior & Lead
Qualification
Bachelors degree
Expiration date
28/11/2026
Job description
Security is everyone's responsibility, and getting a whole workforce to act that way is the job of this Awareness, Training & Communications Specialist in Deloitte's Cyber Operate team in Riyadh. The programme you design covers audiences, key behaviours, channels, an annual plan and success measures, all aligned with NCA ECC awareness and training requirements. Tabletop exercises are a big part of it, built around ransomware, data breach, supplier compromise, payment fraud and disruption to venue or guest operations, and run with executives, crisis teams, IT, OT and business units. Campaigns tackle phishing, MFA, social engineering, PDPL, safe use of AI tools and physical security, with content produced in Arabic and English. Role-based training reaches everyone from the board to contractors and seasonal staff, managed through the LMS. Phishing, smishing and vishing simulations on platforms such as KnowBe4 or Proofpoint show whether behaviour is actually changing. Results feed back into the plan, measured through click and report rates, incident reporting trends and culture surveys. HR, Corporate Communications, the SOC and a network of security champions are close partners. Expect to bring 3 to 7 years of experience, strong writing in both Arabic and English, and ideally a certification such as SSAP, CompTIA Security+ or CISM.
Required skills
Key responsibilities
- Build a sense of cybersecurity ownership across the workforce and executives
- Promote a cybersecurity-first mindset in day-to-day decisions on data, suppliers, projects and services
- Engage executives as visible role models through leadership messages, campaign sponsorship and exercise participation
- Measure cybersecurity culture over time through surveys, behaviour data and reporting trends
- Design the awareness, training and culture framework and multi-year strategy aligned with NCA ECC requirements
- Write and maintain the awareness and training policy, procedures and SOPs, including phishing simulation rules and escalation for repeat clickers
- Analyse each audience's risks, working patterns and preferred channels, including staff without regular computer access
- Create tabletop exercises for executives, crisis management teams, IT, OT and business units based on realistic scenarios
- Facilitate exercises, capture lessons learned and track improvement actions with Governance and Risk
- Launch themed campaigns on phishing, passwords and MFA, social engineering, PDPL, safe AI use, mobile and travel security and physical security
- Produce newsletters, posters, short videos, infographics, intranet pages and digital signage in Arabic and English
- Organise events such as cybersecurity awareness month, roadshows, competitions and site visits
- Deliver role-based training for all staff, executives, board members, IT and OT teams, developers, privileged users, finance, procurement and contractors
- Prepare onboarding security training for new joiners, contractors and seasonal staff
- Administer training content and assignments in the LMS and track completion against targets
- Lead live sessions, workshops and executive briefings
- Issue security advisories and alerts during active threats with the SOC and Corporate Communications
- Publicise the cybersecurity programme's progress and achievements internally
- Conduct phishing, smishing and vishing simulations of increasing difficulty with follow-up training
Experience & skills
- Bring 3 to 7 years of total professional experience
- Hold a bachelor's degree in communications, cybersecurity, IT, education or a related field
- Show experience designing or running a security awareness or culture programme, including phishing simulations, at Senior level, or delivering campaigns and training at Mid level
- Offer experience designing or facilitating cybersecurity tabletop exercises (Senior)
- Write and create content to a high standard in both Arabic and English
- Understand common cyber threats such as phishing, social engineering and account takeover, and NCA ECC awareness requirements
- Present confidently to audiences from front-line staff to executives
- Use phishing simulation and awareness platforms such as KnowBe4, Proofpoint or Cofense, and administer an LMS
- Demonstrate experience measuring security culture through surveys and behaviour metrics
- Create content with tools such as Canva, Adobe and short video editing software
- Add experience with large, mixed workforces in hospitality, venues, operations or contractor settings
- Apply a background in behavioural science or adult learning
- Possess at least one of SSAP, CompTIA Security+ or CISM, with SANS LDR433 or CIPD also valued (preferred)