Cyber Security Education & Awareness Manager

Cyber security is about more than technology. It depends on helping people make informed decisions that protect the information, systems and services they rely on every day. As Cyber Security Education & Awareness Manager at the University of Oxford, you'll have the opportunity to shape security culture across a complex international institution, influencing how approximately 24,000 staff and 20,000 students understand and respond to cyber risks.

Location: Central Oxford (hybrid working available, minimum 2 days onsite per week)

Salary: £49,119 - £58,265 per annum (Grade 8, pro rata for part-time appointments)

Contract: Fixed-term until 31 July 2029, with the expectation of extension subject to funding. Full-time, with part-time applications welcomed (minimum 30 hours/0.8 FTE) and flexible working options.

About Us

Spanning the historic streets of the “city of dreaming spires”, the University of Oxford has been ranked the world's leading university for eleven consecutive years. A place where centuries of tradition meet world-changing innovation, we offer you the chance to shape the future while working in an inspiring environment that promotes excellence. Here, you’ll contribute to an organisation which delivers ground-breaking research that tackles global challenges - from advancing sustainability to pioneering healthcare solutions - and join a diverse, inclusive community that champions your wellbeing, development, and aspirations. Apply now to become part of our extraordinary legacy.

Digital and Information Services provides the technology, digital services and information security that support the University's research, teaching and administration. Its Cyber Security function works with academic departments, professional services and colleges to protect information and systems, manage evolving threats and build institutional resilience.

What We Offer

Working at the University of Oxford offers several exclusive benefits, such as:

• 38 days of annual leave (inclusive of public holidays) to support your wellbeing, with the option to purchase up to 10 extra days and additional leave after long service.

• One of the most generous family leave schemes in UK higher education, offering up to 26 weeks of full-pay maternity and adoption leave, plus 12 weeks of full-pay paternity/partner leave.

• A commitment to hybrid and flexible working to suit your lifestyle.

• An excellent contributory pension scheme.

• Affordable and sustainable commuting options, including a cycle loan scheme, discounted bus travel, and season ticket loans.

• Access to a vibrant community through our social, cultural, and sports clubs.

About the Role

As Cyber Security Education & Awareness Manager, you'll develop and deliver the University's cyber security education and behaviour-change strategy as part of its Cyber Security Improvement Programme. You'll turn complex security risks into accessible training, targeted campaigns and practical guidance that help people make safer decisions.

Working across a highly decentralised organisation, you'll engage senior leaders, academic colleagues, professional services and technical specialists to build support for consistent security practices. You'll use phishing simulation results, engagement data and behavioural insights to identify priorities, evaluate effectiveness and improve outcomes.

You'll have the autonomy to shape a specialist function, advise senior stakeholders and develop colleagues while establishing a measurable, evidence-led approach to security awareness. Your work will help make secure behaviour part of everyday University life.

About You

We welcome applications from candidates who can demonstrate:

• Degree-level education or equivalent professional experience in cyber security, IT, communications, organisational change, learning and development, education or a related discipline.

• Substantial experience of leading education, awareness, communications or behaviour-change programmes in complex organisations, including strategic planning and programme delivery.

• Comprehensive knowledge of cyber security principles, emerging threats, human-related cyber risk and security behaviour-change approaches.

• Experience of developing engaging training and communications, translating technical information into accessible guidance for diverse audiences.

• Strong stakeholder engagement, communication and influencing skills, including the ability to encourage adoption of good practice across organisational boundaries.

• Experience of analysing data and feedback to evaluate effectiveness, identify risks and recommend improvements.

• Strong programme and project management skills, including managing competing priorities, organisational dependencies and external suppliers.

• Experience of managing, supervising or developing colleagues, alongside sound judgement, collaborative working and appropriate handling of sensitive information.

Application Process

To apply, please upload:

• A covering letter/supporting statement

• Your CV

• The details of two referees

The closing date for applications is 12 noon on Monday 9 November 2026 .

Interviews will take place during week commencing Monday 23 November 2026 .