Program Manager

Pay Rate: $70-80 per hour

Summary:

• Location: Oakland, CA
• Work Mode: Hybrid
• Duration: 12 Months

Responsibilities:

• Plan, coordinate, execute, and improve social engineering testing campaigns, including phishing, vishing, smishing, QR code phishing, credential harvesting, and impersonation simulations.
• Create campaign strategies, identify target audiences, obtain approvals, and coordinate testing activities with security and business stakeholders.
• Serve as a backup administrator for all social engineering testing and training activities.
• Evaluate campaign results and implement improvements based on threat trends, organizational risk, and user behaviors.
• Maintain testing documentation, procedures, schedules, and records.
• Deliver engaging virtual and in-person training programs as a visible trainer and security ambassador.
• Conduct immediate outreach to employees who interact with simulated social engineering attacks, focusing on empathy, coaching, and positive behavior reinforcement.
• Partner with leaders and stakeholders to improve security awareness and strengthen organizational security culture.
• Support and lead phone-based social engineering assessments.
• Develop realistic vishing scenarios and coordinate target selection, approvals, communications, execution, reporting, and follow-up activities.
• Analyze results and provide recommendations to improve employee readiness and reduce risk.
• Maintain program metrics that measure awareness effectiveness, behavioral improvements, and risk reduction.
• Create dashboards, scorecards, and executive reporting using Power BI and other reporting tools.
• Track and report key performance indicators including click rates, reporting rates, training completion, remediation activities, and campaign effectiveness.
• Analyze data, identify trends, and provide actionable recommendations to leadership and stakeholders.
• Complete assignments of moderate scope and complexity while managing multiple priorities and deadlines.
• Participate in project teams and cross-functional initiatives supporting cybersecurity awareness and engagement objectives.
• Communicate effectively with employees, contractors, leaders, and stakeholders to gather information, exchange ideas, and drive program success.
• Provide timely correspondence and stakeholder notifications before, during, and after social engineering campaigns.
• Build strong partnerships across security, communications, compliance, risk management, and business organizations.

Requirements:

• Bachelor's degree or equivalent experience.
• Minimum three years of related experience in cybersecurity awareness, communications, training, learning and development, program management, cybersecurity operations, risk management, or a related field.
• Knowledge of social engineering tactics, phishing, vishing, cyber threats, and security awareness best practices.
• Excellent presentation, facilitation, and training delivery skills.
• Ability to assess needs, identify risks, and recommend effective solutions for assigned projects and initiatives.
• Strong verbal and written communication skills with the ability to engage both technical and non-technical audiences.
• Strong understanding of Program Management principles and practices.
• Ability to prioritize, plan, execute, and communicate activities effectively in a fast-paced environment.
• Strong analytical and problem-solving skills with experience measuring program performance and interpreting data.
• Experience developing metrics, dashboards, and executive reports.
• Proficiency with Microsoft Office applications including Word, Excel, PowerPoint, Teams, and Power BI.
• Ability to work independently and collaboratively across multiple teams and organizational levels.
• Knowledge of current utility and energy industry trends, operational challenges, and issues affecting customers and the business.

Preferred Skills:

• Knowledge of customer engagement, adult learning principles, and behavior change strategies.

Benefits:

• This role offers a unique blend of security, training, communications, analytics, and program support.
• The opportunity to influence thousands of employees, lead highly visible awareness initiatives, partner with leaders across the company, and play a critical role in reducing organizational cyber risk.
• An ideal opportunity for someone who enjoys educating others, building relationships, leveraging data to drive decisions, and making a meaningful impact on security culture and organizational resilience.