Cybersecurity Awareness Program Lead

The Role In this role, the Cybersecurity Awareness Program Lead will help build and deliver critical awareness and enablement programs that enable employees and leaders across GM make better day-to-day security decisions. The role will be especially focused on phishing simulation program execution, international security leader enablement, awareness campaign delivery, and role-based education execution.

Own the execution and continuous improvement of GM's global phishing simulation program in partnership with regional engagement, risk, and awareness stakeholders; manage campaign cadence, targeting inputs, communications, metrics and follow-up education. Lead the international security leader enablement program by creating reusable toolkits, briefings, messaging guidance, and operating rhythms that help security leaders reinforce secure behaviors consistently across regions. Plan and deliver cybersecurity awareness campaigns and experiences, including awareness events, in-office activations, and timely microlearning aligned to current threats and business needs. Partner with teammates and subject matter experts to expand role-based cybersecurity training for priority employee groups, business functions, and risk areas. Translate threat trends, phishing results, and engagement data into targeted awareness and enablement actions that improve employee understanding and reduce human risk. Track and report program effectiveness through metrics such as campaign outcomes, completion trends, reporting behaviors, and engagement results; recommend practical improvements based on what the data shows. Support cross-functional coordination with Communications, GRC, Threat Intelligence, and regional security partners to keep awareness content timely, practical, and relevant. Contribute to the development and delivery of an AI focused Application Security program that is aligned with GM’s security priorities. Success in the Role Phishing simulation campaigns are executed consistently and paired with clear, targeted follow-up education. International security leaders have practical materials and a predictable cadence they can use to reinforce cybersecurity expectations in their markets. Awareness campaigns and role-based education are better aligned to current threats, priority risks, and employee needs. Program reporting clearly shows what is working, where behavior is improving, and where additional intervention is needed. Your Skills & Abilities (Required Qualifications) Bachelor's degree or equivalent practical experience. 5+ years of experience in cybersecurity awareness, security communications, learning and development, human risk, change management, or a closely related field. Experience owning recurring awareness campaigns, phishing simulation programs, or comparable behavior-change programs in a large, matrixed organization. Experience developing training, enablement, or communications materials for multiple audiences, including leaders and employees. Strong program management skills, including the ability to manage timelines, deliverables, stakeholders, and metrics across several concurrent workstreams. Strong written and verbal communication skills, with the ability to turn cybersecurity concepts into clear, practical guidance. Demonstrated ability to use metrics and feedback to refine programs and improve outcomes. Ability to work independently on defined workstreams while collaborating closely with teammates and cross-functional partners. What Will Give You a Competitive Edge (Preferred Qualifications) Experience supporting international or regional security awareness programs. Experience with phishing simulation, adaptive learning, or security awareness platforms. Experience partnering with cyber threat intelligence, cyber defense, GRC, HR, or corporate communications teams. Experience building leader toolkits, facilitator guides, playbooks, or manager-ready enablement materials. Familiarity