Security Awareness and Compliance Analyst

Job Title: Security Awareness & Compliance Analyst

Location: Harrisburg, PA (Hybrid – 3 Days Onsite / 2 Days Remote)
Duration: Contract
Interview Process: Virtual Interview

Position Overview

We are seeking a Security Awareness & Compliance Analyst to support a large enterprise Governance, Risk, and Compliance (GRC) program. This role is ideal for a cybersecurity professional with experience managing security awareness initiatives, phishing simulation programs, compliance reporting, and cybersecurity training activities.

The successful candidate will play a key role in strengthening organizational security culture by administering security awareness programs, coordinating phishing campaigns, analyzing program effectiveness, and supporting compliance and audit activities.

Key Responsibilities

• Administer and maintain the enterprise Security Awareness Program.
• Plan, coordinate, and execute phishing simulation campaigns.
• Monitor, analyze, and report security awareness and phishing metrics.
• Develop and distribute cybersecurity awareness communications, training materials, and educational content.
• Coordinate cybersecurity awareness training activities across the organization.
• Maintain documentation and records to support compliance and audit requirements.
• Assist in preparing reports for audits, regulatory requirements, and management reviews.
• Recommend program improvements based on metrics, emerging threats, and industry best practices.
• Support Governance, Risk, and Compliance (GRC) initiatives and cybersecurity program maturity efforts.
• Participate in continuous improvement activities related to information security and compliance.

Required Qualifications

• Experience planning, coordinating, and executing phishing simulation campaigns (3+ years).
• Experience administering and maintaining enterprise Security Awareness Programs (2+ years).
• Experience developing and distributing security awareness communications and training materials (3+ years).
• Experience maintaining awareness program documentation and audit/compliance records (3+ years).
• Experience preparing reports for audits, regulatory requirements, and management reviews (2+ years).
• Experience recommending security awareness improvements based on metrics, threat trends, and industry best practices (3+ years).