Security Awareness and Compliance Analyst

Location: Harrisburg, PA
Work Arrangement: Hybrid - 60% Onsite / 40% Remote
Interview: Virtual
Contract: 08/24/2026 - 12/31/2026. Historically, these roles are extended for an additional year.
Visas Accepted: USC, GC, GC EAD, H1B

Role Overview

Under the direction of the IT Compliance and Risk Manager, this position serves as a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO), supporting the Commonwealth's Governance, Risk, and Compliance (GRC) Department. The Security Awareness and Compliance Analyst administers the organization's Security Awareness and Phishing Program and supports governance, risk, and compliance initiatives. The position is hybrid, with 3 days in the office and 2 days remote at Forum Building | 607 South Drive | Harrisburg, PA 17120.

Primary Responsibilities

• Tracks, analyzes, and reports security awareness and phishing metrics using established reporting tools.
• Coordinates required cybersecurity awareness training activities across the organization.
• Assists with governance, risk, and compliance initiatives as assigned.
• Participates in continuous improvement activities supporting the organization's cybersecurity program.
• Performs related work as assigned.

Required Technical Skills

• Plans, coordinates, and executes phishing simulation campaigns.
• Administers and maintains the enterprise Security Awareness Program.
• Develops and distributes security awareness communications and educational materials.
• Maintains awareness program documentation and records to support compliance and audit requirements.
• Assists with preparation of reports supporting regulatory requirements, audits, and management reviews.
• Recommends improvements to awareness activities based on metrics, emerging threats, and industry best practices.