Designing and delivering security-awareness training inside a company, you build the people-side of cybersecurity defense — phishing simulations, awareness campaigns, role-based training, and the measurement work that tracks behavior change over time.
A typical week tends to involve content development, campaign management, training delivery, and the steady cadence of metrics review — designing a new phishing campaign, refreshing role-based training modules, delivering executive briefings on awareness posture, reviewing click-rates and reporting rates. Phishing resilience, training completion, and behavior-change metrics are the operating measures.
The friction often lies in the cultural challenge of security awareness — most employees view training as overhead, and the specialist works against that resistance to land genuine behavior change. Variance across employers is real: regulated industries run mature awareness programs with regular phishing simulations; smaller firms may have you building the program from scratch.
This work tends to fit folks who enjoy the intersection of cybersecurity and learning design. CISM, CISSP-adjacent, and ATD CPTD credentials anchor advancement. The trade-off is the slow visible payoff — awareness work compounds across years rather than showing up in quarterly metrics, and incidents still happen even when programs run well.
Don't do Truest if you aren't ready
to invest in yourself and your career.
Where this role sits in the broader career landscape — and where it can take you.
Don't know if you want to stay in your job?
Get your career on record. Then decide.
Roles like this one sit within a broader occupational category. The numbers below reflect that full landscape — helpful for context, but your specific experience will depend on level, specialty, and where you work.
Roles with similar work and overlapping career paths
View all Business Operations roles →Designing and delivering security-awareness training inside a company, you build the people-side of cybersecurity defense — phishing simulations, awareness campaigns, role-based training, and the measurement work that tracks behavior change over time.
Median pay for a Security Awareness Training Specialist is about $66K nationally, with the field ranging roughly from $38K to $120K depending on experience, employer, and metro (BLS).
Core skills for this role include Instructing, Speaking, Learning Strategies, Social Perceptiveness, and Active Listening.
Most people in this role hold a bachelor's degree.
Employment in this field is projected to grow about 10.8% through 2034, with roughly 436,610 people working in it today (BLS).
Closely related roles include Senior Security Awareness Training Specialist, Security Director, and Training Manager.
Do one small thing to grow in your career this week. Pick one of these; each comes with the words to use.
More career advice
We believe careers grow through small steps taken often, more than big leaps. So we’ve collected hundreds of them for you to try.
Browse career adviceYour job belongs to your employer.
Your career belongs to you.