Security Specialist (GRC & Awareness)

The ideal candidate will be responsible for developing, delivering, and continuously improving security awareness programs that strengthen security culture, reduce human risk, and support regulatory compliance. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs.

Kforce's client is seeking a Security Specialist to join their team in Saint Louis, MO. This is a six-month contract opportunity with the potential to extend or convert based on performance and business needs. Summary: This role will lead cybersecurity awareness and training initiatives across a complex enterprise environment. The ideal candidate will be responsible for developing, delivering, and continuously improving security awareness programs that strengthen security culture, reduce human risk, and support regulatory compliance. Responsibilities:

• Lead and execute enterprise-wide cybersecurity awareness and training programs
• Develop and deliver security training focused on phishing, social engineering, data protection, and other cyber risks
• Manage phishing simulation campaigns, including planning, execution, reporting, and follow-up education
• Create and maintain engaging training content for technical and non-technical audiences
• Partner with Legal, Compliance, Privacy, HR, and Security teams to ensure training aligns with policies and regulatory requirements
• Track program effectiveness through training metrics, phishing results, and user behavior trends
• Prepare reporting and insights for leadership and key stakeholders
• Support audits, regulatory reviews, and compliance initiatives
• Promote a strong security culture through awareness campaigns and employee engagement efforts
• Serve as a trusted advisor on cybersecurity awareness best practices

Requirements:

• 5+ years of experience in cybersecurity awareness, training, GRC, or related security functions
• Experience developing and delivering cybersecurity training programs in a regulated or complex organization
• Strong understanding of cybersecurity threats, security awareness best practices, and user behavior risks
• Experience partnering with Compliance, Privacy, Legal, or Audit teams
• Excellent written, verbal, and presentation skills
• Ability to communicate technical concepts to non-technical audiences
• Strong organizational skills with the ability to manage multiple initiatives simultaneously

Preferred Qualifications:

• Security certifications such as CISSP, CISM, Security+, or similar credentials
• Experience within financial services, healthcare, or other highly regulated industries
• Familiarity with regulatory and cybersecurity frameworks such as NIST CSF, GLBA, or NYDFS
• Experience administering phishing simulation platforms and security awareness tools