Overview
Skills
Job Details
Seeking an Information Security Communications Analyst to join our cybersecurity team.
This position plays a key role in supporting the security awareness and training efforts, with a strong focus on maintaining compliance with ISO 27001 standards. Working closely with the Security Awareness Program Manager, this role will help coordinate and communicate updates around certification status, policy exception reviews, training initiatives, and ongoing compliance tracking.
The role may also provide occasional support to broader firmwide initiatives led by the Security Awareness Program Manager to promote a culture of security.
Responsibilities will include:
-
Supporting internal communications around ISO certification progress
-
Coordinating firmwide security training efforts and monitoring completion rates
-
Preparing documentation for security policy exceptions and review processes
-
Tracking key metrics and providing regular reporting on awareness initiatives
-
Assisting with broader cultural efforts to embed strong security practices across teams
In this capacity, the Information Security Communications Analyst will:
-
Contribute to creating a culture of security by growing awareness, engaging users in security best practices, and reducing risky behaviors
-
Support the continuous evaluation of the effectiveness of existing information security training and awareness program/activities
-
Collaborate with the Information Security team to identify areas of risk and develop ideas for training and awareness activities
Proficiencies:
-
A working knowledge of information security and risk mitigation principles, theories, and techniques in daily work
-
Demonstrated understanding and use of basic project management methodologies
-
Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel
-
Creative thinking and understanding of audience to produce engaging materials in a variety of formats and media, including presentations
-
A high degree of independence, integrity, and confidentiality
-
Exposure to ISO 27001 certification requirements and/or certification maintenance and audits
Qualifications:
-
Bachelor's degree (required)
-
Industry-recognized certification (CompTIA Security+, CISSP, etc.)
-
At least 3 years' work experience in the Information Security sector