Security Awareness and Compliance Analyst :: Harrisburg, PA (Hybrid)

Security Awareness and Compliance Analyst - Harrisburg, PA (Hybrid)

Duration: 3+ months

Position Summary:

Seeking for a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO). You will support the Governance, Risk, and Compliance (GRC) Department by administering the Security Awareness and Phishing Program and contributing to GRC initiatives.

Responsibilities:

• Administer and maintain the enterprise Security Awareness Program.
• Plan, coordinate, and execute phishing simulation campaigns.
• Track, analyze, and report on security awareness and phishing metrics.
• Develop and distribute security awareness communications and educational materials.
• Coordinate cybersecurity awareness training activities across the organization.
• Maintain program documentation and records to support compliance and audit requirements.
• Assist with preparing reports for regulatory requirements, audits, and management reviews.
• Recommend improvements to awareness activities based on metrics and industry best practices.
• Participate in continuous improvement activities for the cybersecurity program.

Knowledge and Abilities:

• Understanding of information security awareness principles and cybersecurity fundamentals.
• Experience with security awareness and phishing simulation platforms.
• Proficiency in reporting and data analysis techniques.
• Ability to coordinate multiple projects and training activities.
• Strong communication skills for diverse audiences.
• Skill in developing user-friendly educational materials.
• Capability to establish productive working relationships with staff.

Must Have Skills:

• Experience in planning, coordinating, and executing phishing simulation campaigns.
• Experience in administering the enterprise Security Awareness Program.
• Experience in developing and distributing security awareness communications and educational materials.
• Experience in maintaining program documentation and records for compliance and audit requirements.
• Experience in assisting with report preparation for regulatory requirements, audits, and management reviews.
• Experience in recommending improvements based on metrics and industry best practices.