Xylem is a Fortune 500 global water solutions company dedicated to advancing sustainable impact and empowering the people who make water work every day. As a leading water technology company with 23,000 employees operating in over 150 countries, Xylem is at the forefront of addressing the world's most critical water challenges. We invite passionate individuals to join our team, dedicated to exceeding customer expectations through innovative and sustainable solutions.<div>The RoleAs a Cybersecurity Behavior &amp; Culture Specialist, you will lead the development and execution of Xylem’s human-centered cybersecurity awareness and culture strategy. Working closely with the Enterprise Security Operations Center (SOC), Threat Intelligence, Incident Response, and business stakeholders, you will transform insights from emerging threats and real-world attacks into measurable improvements in cyber awareness, behavior, and organizational resilience.You will play a critical role in reducing human cyber risk by designing innovative awareness programs, delivering targeted training, driving culture change initiatives, and strengthening incident readiness across the organization.Core Responsibilities<ul><li>Partner with the Enterprise SOC and Threat Intelligence teams to stay current on emerging threats, attack trends, and adversary techniques, translating threat intelligence into awareness campaigns, simulations, and employee education initiatives.</li><li>Design, execute, and continuously improve monthly phishing simulation programs aligned to real-world attack patterns, organizational risk exposure, user maturity levels, and evolving threat landscapes.</li><li>Develop and maintain risk-based metrics that measure human cyber risk across business units and functions, providing executive and operational reporting that translates behavioral data into actionable risk insights.</li><li>Identify high-risk user populations and recommend targeted interventions, awareness campaigns, and reinforcement activities to drive measurable improvements in cybersecurity behaviors.</li><li>Lead the development and delivery of enterprise-wide cybersecurity awareness training, ensuring content reflects current threats, regulatory expectations, organizational priorities, and alignment with Ethics &amp; Compliance initiatives.</li><li>Design and deliver role-based and function-specific cybersecurity education programs while expanding the organization's cybersecurity culture through gamification, micro-learning, behavioral nudges, and other data-driven behavior change strategies.</li><li>Lead the organization's annual Cybersecurity Awareness Month program by developing engaging campaigns that leverage interactive content, quizzes, challenges, recognition programs, and executive engagement to increase participation and awareness across the enterprise.</li><li>Design, facilitate, and continuously improve cybersecurity tabletop exercises in partnership with the Enterprise SOC, Incident Response teams, and business stakeholders, identifying response gaps, strengthening cross-functional coordination, and improving organizational readiness over time.</li></ul>Required Qualifications<ul><li>Bachelor's degree in Cybersecurity, Information Technology, Communications, Organizational Development, Psychology, Education, or a related field; or equivalent combination of education and experience.</li></ul><ul><li>5+ years of experience in cybersecurity awareness, human risk management, cybersecurity culture, behavioral change, or related cybersecurity programs.</li><li>Experience designing, implementing, and managing enterprise phishing simulation programs.</li><li>Strong understanding of social engineering techniques, threat actor behaviors, and human cyber risk management concepts.</li><li>Demonstrated ability to translate complex technical threats into engaging, business-focused communications and training programs for diverse audiences.</li><li>Strong analytical, presentation, stakeholder management, and communication skills.</li></ul>Preferred Qualifications<ul><li>Experience working closely with or within a Security Operations Center (SOC), Incident Response, or Threat Intelligence function.</li><li>Experience with security awareness platforms such as Proofpoint, KnowBe4, Microsoft Attack Simulation Training, or similar technologies.</li><li>Familiarity with behavioral science, adult learning methodologies, Nudge Theory, habit formation principles, or other behavior-change frameworks.</li><li>Experience developing risk-based reporting models and executive dashboards related to human cyber risk.</li><li>Experience using Power BI or similar analytics platforms to analyze, visualize, and report phishing simulation and awareness program results.</li></ul></div>Join the global Xylem team to be a part of innovative technology solutions transforming water usage, conservation, and re-use. Our products impact public utilities, industrial sectors, residential areas, and commercial buildings, with a commitment to providing smart metering, network technologies, and advanced analytics for water, electric, and gas utilities. Partner with us in creating a world where water challenges are met with ingenuity and dedication; where we recognize the power of inclusion and belonging in driving innovation and allowing us to compete more effectively around the world.<div>At Xylem, you'll not only contribute to solving water issues but also have the chance to make a difference through our paid Volunteer Program, Xylem Watermark. We prioritize our employees' well-being through inclusion and belonging as well as our Employee Resource Groups (ERG). Proud to be an Equal Employment Opportunity (including disability and veterans) and Affirmative Action workplace, Xylem fosters an inclusive environment free from discrimination or harassment. </div><div>  </div><div>Please note that the information in this job description outlines the general nature of the position and is not an exhaustive list of duties. Xylem is dedicated to providing reasonable accommodations to enable all employees to perform their essential job functions. We reserve the right to modify this job description and assign additional duties as needed. Embrace the opportunity to be part of Xylem's transformative journey in shaping the future of water technology! #XylemCareers #GlobalImpact #WaterInnovation </div>

Xylem is the global leader in advanced technologies, solutions and services that address the world&rsquo;s biggest water challenges. We enable our customers to dramatically improve the way water and wastewater is used, managed, conserved, re-used and returned to nature. At every level, our global team is committed to access, equity, inclusion, and diversity. Our goal is for all our colleagues to be involved, respected, valued, connected, and free to bring their authentic selves and ideas. If you are excited and passionate about solving water, we want to hear from you.

Cybersecurity Behavior and Culture Specialist

Xylem is a Fortune 500 global water solutions company dedicated to advancing sustainable impact and empowering the people who make water work every day. As a leading water technology company with 23,000 employees operating in over 150 countries, Xylem is at the forefront of addressing the world's most critical water challenges. We invite passionate individuals to join our team, dedicated to exceeding customer expectations through innovative and sustainable solutions.<div>The RoleAs a Cybersecurity Behavior &amp; Culture Specialist, you will lead the development and execution of Xylem’s human-centered cybersecurity awareness and culture strategy. Working closely with the Enterprise Security Operations Center (SOC), Threat Intelligence, Incident Response, and business stakeholders, you will transform insights from emerging threats and real-world attacks into measurable improvements in cyber awareness, behavior, and organizational resilience.You will play a critical role in reducing human cyber risk by designing innovative awareness programs, delivering targeted training, driving culture change initiatives, and strengthening incident readiness across the organization.Core Responsibilities<ul><li>Partner with the Enterprise SOC and Threat Intelligence teams to stay current on emerging threats, attack trends, and adversary techniques, translating threat intelligence into awareness campaigns, simulations, and employee education initiatives.</li><li>Design, execute, and continuously improve monthly phishing simulation programs aligned to real-world attack patterns, organizational risk exposure, user maturity levels, and evolving threat landscapes.</li><li>Develop and maintain risk-based metrics that measure human cyber risk across business units and functions, providing executive and operational reporting that translates behavioral data into actionable risk insights.</li><li>Identify high-risk user populations and recommend targeted interventions, awareness campaigns, and reinforcement activities to drive measurable improvements in cybersecurity behaviors.</li><li>Lead the development and delivery of enterprise-wide cybersecurity awareness training, ensuring content reflects current threats, regulatory expectations, organizational priorities, and alignment with Ethics &amp; Compliance initiatives.</li><li>Design and deliver role-based and function-specific cybersecurity education programs while expanding the organization's cybersecurity culture through gamification, micro-learning, behavioral nudges, and other data-driven behavior change strategies.</li><li>Lead the organization's annual Cybersecurity Awareness Month program by developing engaging campaigns that leverage interactive content, quizzes, challenges, recognition programs, and executive engagement to increase participation and awareness across the enterprise.</li><li>Design, facilitate, and continuously improve cybersecurity tabletop exercises in partnership with the Enterprise SOC, Incident Response teams, and business stakeholders, identifying response gaps, strengthening cross-functional coordination, and improving organizational readiness over time.</li></ul>Required Qualifications<ul><li>Bachelor's degree in Cybersecurity, Information Technology, Communications, Organizational Development, Psychology, Education, or a related field; or equivalent combination of education and experience.</li></ul><ul><li>5+ years of experience in cybersecurity awareness, human risk management, cybersecurity culture, behavioral change, or related cybersecurity programs.</li><li>Experience designing, implementing, and managing enterprise phishing simulation programs.</li><li>Strong understanding of social engineering techniques, threat actor behaviors, and human cyber risk management concepts.</li><li>Demonstrated ability to translate complex technical threats into engaging, business-focused communications and training programs for diverse audiences.</li><li>Strong analytical, presentation, stakeholder management, and communication skills.</li></ul>Preferred Qualifications<ul><li>Experience working closely with or within a Security Operations Center (SOC), Incident Response, or Threat Intelligence function.</li><li>Experience with security awareness platforms such as Proofpoint, KnowBe4, Microsoft Attack Simulation Training, or similar technologies.</li><li>Familiarity with behavioral science, adult learning methodologies, Nudge Theory, habit formation principles, or other behavior-change frameworks.</li><li>Experience developing risk-based reporting models and executive dashboards related to human cyber risk.</li><li>Experience using Power BI or similar analytics platforms to analyze, visualize, and report phishing simulation and awareness program results.</li></ul></div>Join the global Xylem team to be a part of innovative technology solutions transforming water usage, conservation, and re-use. Our products impact public utilities, industrial sectors, residential areas, and commercial buildings, with a commitment to providing smart metering, network technologies, and advanced analytics for water, electric, and gas utilities. Partner with us in creating a world where water challenges are met with ingenuity and dedication; where we recognize the power of inclusion and belonging in driving innovation and allowing us to compete more effectively around the world.<div>At Xylem, you'll not only contribute to solving water issues but also have the chance to make a difference through our paid Volunteer Program, Xylem Watermark. We prioritize our employees' well-being through inclusion and belonging as well as our Employee Resource Groups (ERG). Proud to be an Equal Employment Opportunity (including disability and veterans) and Affirmative Action workplace, Xylem fosters an inclusive environment free from discrimination or harassment. </div><div>  </div><div>Please note that the information in this job description outlines the general nature of the position and is not an exhaustive list of duties. Xylem is dedicated to providing reasonable accommodations to enable all employees to perform their essential job functions. We reserve the right to modify this job description and assign additional duties as needed. Embrace the opportunity to be part of Xylem's transformative journey in shaping the future of water technology! #XylemCareers #GlobalImpact #WaterInnovation </div>

Cybersecurity Behavior and Culture Specialist

About the Job

About the Company

Xylem

Similar Jobs

Cybersecurity Compliance Project Manager

Cybersecurity Compliance Project Manager

Information Security Compliance Manager

Information Security Compliance Manager

Senior Security Engineer

Senior Security Engineer

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps

Cyber Security Operations Engineer

Cyber Security Operations Engineer

Security Engineer

Security Engineer

Engineer, Cloud Security

Engineer, Cloud Security

Cybersecurity Program Manager

Cybersecurity Program Manager

Sr Dir - Cybersecurity

Sr Dir - Cybersecurity

Cybersecurity Professional

Cybersecurity Professional