Security Awareness Trainer.

A specialist responsible for designing, delivering, and measuring the security-awareness program that helps employees recognize and resist phishing, social engineering, and other human-layer threats. It belongs to the Roles & Careers category of cybersecurity.

A specialist responsible for designing, delivering, and measuring the security-awareness program that helps employees recognize and resist phishing, social engineering, and other human-layer threats.

A Security Awareness Trainer designs, delivers, and measures the program that turns employees into a strong human layer of defence. Responsibilities include curriculum design (onboarding, annual training, role-based modules for developers, finance, executives), phishing simulations and post-click coaching, internal communications campaigns, tabletop exercises, and reporting metrics such as click rates, report rates, and culture-survey trends. The role typically reports to the CISO, head of GRC, or chief learning officer, depending on organization. Common backgrounds blend instructional design or communications with security knowledge; useful credentials include SANS LDR433 / SSAP, MS-100, CISM, or instructional-design certifications. The role is increasingly product-led, leveraging platforms like KnowBe4, Hoxhunt, or Living Security.

Defences for Security Awareness Trainer typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Security awareness manager, Cyber culture lead.