Principal Cybersecurity Awareness Specialist

Principal, Cybersecurity Awareness & Communications

At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do.

We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters—and so do you.

The Principal, Cybersecurity Awareness & Communications is a strategic leadership role within the Global Security team, responsible for shaping, executing, and operationalizing security communications and enablement in direct support of the Chief Security Officer (CSO). This role serves as the primary architect and steward of how Global Security communicates internally and externally, ensuring clarity, consistency, credibility, and impact across executive leadership, employees, customers, partners, and external stakeholders.

Operating with a high degree of autonomy and influence, this role translates security strategy, risk posture, SaaS security considerations, incident context, and program outcomes into clear, audience-appropriate messaging that enables understanding, confidence, and action—particularly during high‑stakes and time‑sensitive situations.

Key Responsibilities

• Executive Communications & CSO Enablement
• Serve as a trusted communications and awareness partner to the CSO, supporting executive engagement on cybersecurity strategy, risk, incidents, and priorities.
• Develop and maintain a cohesive security story that aligns strategy, priorities, risk posture, SaaS operating realities, and outcomes across forums and audiences.
• Support executive engagement, messaging, narratives, and positioning across leadership, board-level, customer, and external-facing engagements.
• Anticipate executive awareness needs related to emerging threats, incidents, regulatory focus, business change, or strategic initiatives.
• Incident Response & Crisis Communications Support
• Support Global Security leadership during cybersecurity incidents and crisis situations, particularly in a SaaS environment, by developing clear, timely, and accurate executive and stakeholder communications.
• Partner closely with Incident Response, Legal, Corporate Communications, Product, Engineering, and executive leadership to align messaging, disclosures, and situational updates during active incidents.
• Translate complex and rapidly evolving cybersecurity incident details into executive-ready briefings, talking points, decision summaries, and customer-aware communications.
• Help ensure consistency between internal, customer-facing, and external messaging throughout the incident lifecycle—from initial response through post-incident communications.
• Contribute to the development and continuous improvement of incident response and crisis communications frameworks, executive readiness materials, and response playbooks.
• Internal Security Communications & Enablement
• Partner with Global Security leaders and program owners to translate complex initiatives—including SaaS security controls and incident response capabilities—into clear, actionable communications.
• Design enablement content that supports adoption of security processes, tools, policies, and crisis response practices across the organization.
• External Communications & Customer‑Facing Engagement
• Support external-facing security communications in partnership with Legal, Corporate Communications, Product, Engineering, and Customer teams.
• Contribute to customer-facing security materials, executive customer engagements, incident-related communications, and trust-focused narratives in a SaaS context.
• Serve as a communications advisor for customer-facing discussions where cybersecurity posture, risk, transparency, or incident response is part of the dialogue.
• Ensure consistency, accuracy, and credibility across all outward-facing security and incident-related messaging.
• Narrative Development & Strategic Messaging
• Develop proactive communication plans aligned to key security initiatives, SaaS platform evolution, transformations, incidents, or milestones.
• Anticipate communication needs tied to organizational change, emerging risk, incident activity, or leadership priorities.
• Shape how Global Security's response to risk and incidents is understood externally and internally, reinforcing preparedness, transparency, accountability, and continuous improvement.
• Collaboration & Influence
• Act as a connective tissue across Global Security, Corporate Communications, Legal, IT, Product Security, Engineering, Incident Response, and Customer-facing teams.
• Provide guidance and coaching to security leaders on executive communication, customer-facing awareness, and crisis communications.
• Represent Global Security's voice with credibility and confidence across senior leadership, customer, and partner forums—particularly during high‑visibility or sensitive events.

Required Qualifications

• Extensive experience (10+ years) in communications, enablement, or strategic storytelling within SaaS, cybersecurity, technology, or risk-focused organizations.
• Demonstrated experience supporting cybersecurity incident response and crisis communications, including executive and customer-facing scenarios.
• Proven ability to partner with executive leaders on high-visibility, high-impact communications in dynamic and time-sensitive environments.
• Exceptional written and verbal communication skills, with the ability to translate complex SaaS security and incident-related concepts for executive, customer, and non-technical audiences.
• Experience operating in large, global, matrixed environments with senior stakeholder and customer engagement.
• Strong business and security acumen, with sound judgment when handling sensitive, regulated, or high-risk issues.

Preferred Qualifications

• Experience working directly with or in support of a CISO / CSO or equivalent executive leader.
• Background in cybersecurity, information security, risk management, or technology communications within a SaaS or cloud-based environment.
• Experience supporting customer trust initiatives, security reviews, executive customer briefings, or post-incident communications.
• Familiarity with enterprise security programs, SaaS operating models, governance, regulatory considerations, and incident response practices.

Company Overview:

UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry — because great organizations know their workforce is their competitive edge.

Equal Opportunity Employer

UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Disability Accommodation in the Application and Interview Process

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email View email address on click.appcast.io.

The pay range for this position is $163,900.00 to $235,550.00. The actual base pay offered may vary depending on skills, experience, job-related knowledge and work location. In addition to base pay, employees may be eligible to participate in a performance-based bonus plan and to receive restricted stock unit awards as part of total compensation.