Compliance Analyst

The analyst will develop and coordinate security awareness activities, manage phishing simulation campaigns, analyze program effectiveness, and support regulatory reporting to contribute to the overall maturity of the GRC program. This position serves as a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO), supporting the Governance, Risk, and Compliance (GRC) Department.

Job Summary

This position serves as a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO), supporting the Governance, Risk, and Compliance (GRC) Department. The role involves administering the organization's Security Awareness and Phishing Program and supporting governance, risk, and compliance initiatives. The analyst will develop and coordinate security awareness activities, manage phishing simulation campaigns, analyze program effectiveness, and support regulatory reporting to contribute to the overall maturity of the GRC program.

Responsibilities

• Administer and maintain the enterprise Security Awareness Program.
• Plan, coordinate, and execute phishing simulation campaigns.
• Track, analyze, and report security awareness and phishing metrics using established reporting tools.
• Develop and distribute security awareness communications and educational materials.
• Coordinate required cybersecurity awareness training activities across the organization.
• Maintain awareness program documentation and records to support compliance and audit requirements.
• Assist with preparation of reports supporting regulatory requirements, audits, and management reviews.
• Recommend improvements to awareness activities based on metrics, emerging threats, and industry best practices.
• Assist with governance, risk, and compliance initiatives as assigned.
• Participate in continuous improvement activities supporting the organization's cybersecurity program.
• Perform related work as assigned.

Qualifications

• Knowledge of information security awareness principles and cybersecurity fundamentals.
• Experience with security awareness and phishing simulation platforms.
• Proficiency in reporting and data analysis techniques.
• Experience in compliance and audit support activities.
• Ability to coordinate multiple projects and training activities.
• Strong analytical skills to identify trends in program metrics.
• Effective communication skills with diverse audiences.
• Ability to develop user-friendly educational materials.
• Capability to establish productive working relationships with agency staff.

Work Schedule

This is a hybrid position requiring three days in the office and two days remote at the Forum Building in Harrisburg, PA. Interviews will be conducted virtually.

Harrisburg, PA, is the capital city of Pennsylvania, offering a rich history, vibrant culture, and a diverse community. It is known for its beautiful riverfront, museums, and proximity to other major cities.

Benefits PEAK's benefit offerings available for our associates include medical, dental, vision, Flexible Spending Account (FSA), Dependent Care Savings Account (DCA), and 401K plan.PEAK believes that taking care of our team is essential for success and we are proud to provide benefits that enhance both your well-being and your future. Additionally, our associates may be eligible for Paid Sick Leave as required by Federal, State, or local laws. Equal Opportunity Employer (EEO) PEAK Technical Staffing is committed to creating a diverse and inclusive environment and is proud to be an Equal Opportunity Employer. PEAK does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status, or any other characteristic protected by applicable law. All employment decisions are made based on qualifications, merit, and business need. We encourage all individuals to apply. Americans Disabilities Act (ADA) The physical and mental requirements described in this job description are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.Must be able to perform the essential physical functions of the position, including sitting, standing, walking, stooping, kneeling, andlifting upto 25 pounds, with or without reasonable accommodation. Candidate Privacy To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://peaktechnical.com/privacy-policy/and https://peaktechnical.com/ca-residents-privacy-rights/ AI Recruiting Disclosure We use AI-assisted tools to help review applications and compare your experience to job requirements, but all hiring decisions are made by human recruiters. You may request a human-only process or opt out of automated communication at any time. Required notices and our latest bias audit are available on our website: www.peaktechnical.com/ai-disclosure.