Security Program Manager

Role: Security Awareness Coordinator Visa: Native Location: Houston TX - Hybrid- needs to go to the office whenever needed

Summary : The Security Awareness Coordinator is responsible for the institution's information security awareness and education program. The overall goal of the security awareness and education program is to reduce information security risk by ensuring that all students, faculty, and staff understand campus security policies and apply university information security practices with respect to institutional data and Information technology systems.

In collaboration with other members of the information security team, this position will contribute to a broad set of efforts, including drafting publications, creating and managing website content, facilitating marketing campaigns, scheduling meetings, creating timelines and infographics; and helping to plan outreach, awareness, and educational events.

Communications Planning and Execution

• Develop and maintain an information security communications calendar aligned to security priorities, awareness campaigns, major technology changes, and recurring training needs.
• Draft, edit, and publish communications including email announcements, intranet articles, newsletter items, Teams posts, talking points, FAQs, one-page guides, leadership messages, and user-facing instructions.
• Coordinate reviews with information security subject matter experts, IT partners, communications partners, compliance, legal, HR, and business stakeholders as needed.
• Package technical security requirements into audience-specific messages that are understandable, actionable, and appropriate for clinical, research, academic, administrative, and technical audiences.
• Maintain message consistency across channels and ensure communications use approved terminology, branding, tone, and accessibility practices.

Security Awareness and Behavior Change

• Support awareness campaigns focused on high-risk behaviors, including phishing, credential protection, data handling, secure collaboration, device security, reporting suspicious activity, and policy compliance.
• Create concise educational content such as tip sheets, mini-campaigns, intranet content, infographics, slides, and quick-reference materials.
• Partner with training owners to promote required security training and reinforce key learning objectives through communications before, during, and after training cycles.
• Use plain-language storytelling and practical examples to connect security behaviors to real work scenarios and personal accountability.

Program Coordination and Stakeholder Management

• Run communication intake, prioritization, drafting, review, approval, scheduling, publishing, and archive processes for security messages.
• Maintain tracker(s) for communication requests, due dates, distribution channels, reviewers, approvals, and publication status.
• Coordinate with technical teams to understand implementation timelines, user impacts, adoption barriers, and support readiness before messages are released.
• Support meetings, working sessions, and campaign planning sessions by preparing agendas, notes, action items, and follow-ups related to communications work.
• Document repeatable procedures, templates, contact lists, and institutional knowledge to support continuity when the regular employee returns or coverage changes.

Required Qualifications

• Four or more years of relevant experience in communications, internal communications, change communications, training communications, cybersecurity awareness, IT communications, or a closely related role.
• Excellent writing, editing, proofreading, and message-structuring skills, with demonstrated ability to simplify complex or technical information without losing accuracy.
• Experience coordinating communications across multiple stakeholders, reviewers, and deadlines.
• Strong project coordination skills, including attention to detail, organization, scheduling, issue tracking, and follow-through.
• Working knowledge of Microsoft 365 tools such as Outlook, Word, PowerPoint, Excel, Teams, SharePoint, and Forms or equivalent collaboration platforms.
• Ability to work independently, manage ambiguity, handle sensitive information appropriately, and escalate when review or leadership direction is needed.
• Experience supporting information security, privacy, compliance, risk management, IT service management, healthcare, higher education, or similarly regulated environments.

Preferred Qualifications

• Familiarity with security awareness topics such as phishing, multifactor authentication, password practices, data classification, secure email, endpoint security, incident reporting, and acceptable use.
• Experience creating content for intranet sites, newsletters, awareness campaigns, executive communications, training launches, FAQs, and quick-reference guides.
• Experience with communications analytics, survey feedback, campaign measurement, or behavior-change communications.
• Familiarity with accessibility and inclusive communication practices.
• Basic design or content-production capability using PowerPoint, Captivate, Articulate, SharePoint pages, or similar tools.

What This Role Is Not

• Not a hands-on technical security engineering role.
• Not responsible for owning security operations, incident response, vulnerability remediation, or policy approval decisions.
• Not expected to independently define security requirements without review from the appropriate information security subject matter expert.

For applications and inquiries, contact:View email address on us.fitly.work