IT01
Job Title: Compliance Analyst
Location: Harrisburg, PA (Hybrid – 3 Days Onsite / 2 Days Remote)
Duration: Contract
Interview Process: Virtual Interview
Position Overview
We are seeking a Security Awareness & Compliance Analyst to support a large enterprise Governance, Risk, and Compliance (GRC) program. This role is ideal for a cybersecurity professional with experience managing security awareness initiatives, phishing simulation programs, compliance reporting, and cybersecurity training activities.
The successful candidate will play a key role in strengthening organizational security culture by administering security awareness programs, coordinating phishing campaigns, analyzing program effectiveness, and supporting compliance and audit activities.
Key Responsibilities
- Administer and maintain the enterprise Security Awareness Program.
- Plan, coordinate, and execute phishing simulation campaigns.
- Monitor, analyze, and report security awareness and phishing metrics.
- Develop and distribute cybersecurity awareness communications, training materials, and educational content.
- Coordinate cybersecurity awareness training activities across the organization.
- Maintain documentation and records to support compliance and audit requirements.
- Assist in preparing reports for audits, regulatory requirements, and management reviews.
- Recommend program improvements based on metrics, emerging threats, and industry best practices.
- Support Governance, Risk, and Compliance (GRC) initiatives and cybersecurity program maturity efforts.
- Participate in continuous improvement activities related to information security and compliance.
Required Qualifications
- Experience planning, coordinating, and executing phishing simulation campaigns (3+ years).
- Experience administering and maintaining enterprise Security Awareness Programs (2+ years).
- Experience developing and distributing security awareness communications and training materials (3+ years).
- Experience maintaining awareness program documentation and audit/compliance records (3+ years).
- Experience preparing reports for audits, regulatory requirements, and management reviews (2+ years).
- Experience recommending security awareness improvements based on metrics, threat trends, and industry best practices (3+ years).
Preferred Qualifications
- Experience supporting Governance, Risk, and Compliance (GRC) programs.
- Experience working in regulated or large enterprise environments.
- Familiarity with cybersecurity frameworks, audit processes, and risk management practices.
- Security certifications such as Security+, GSEC, CISA, CRISC, or similar are a plus.
Work Location: In person
