Cybersecurity Awareness & Compliance Lead

Komatsu; Milwaukee (WI); On-site; USD 80,000 - 95,000; Full time

Benefits offered by this job

Health benefits

401k and/or employee savings

Vacation and holidays

Employee assistance programs

Disability benefits

Life insurance

Learning and development

Job summary

Komatsu is seeking an IT Cybersecurity Compliance Analyst to strengthen security culture, compliance posture, and investigative readiness. You will own the Cybersecurity Awareness Program, drive employee education, phishing simulations, communications, metrics, and engagement across the business.

Additionally, you will support cybersecurity compliance activities, Legal Hold, and eDiscovery processes with a focus on confidentiality and data handling.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or related field.
• 2+ years in cybersecurity compliance or related field.
• Experience with Microsoft 365 Legal Hold/eDiscovery.
• Excellent communication and ability to translate concepts across the business.
• Experience with phishing simulation tools.
• Strong email header analysis skills.

Responsibilities

• Own Cybersecurity Awareness Program strategy, communications, and metrics.
• Administer Legal Hold and eDiscovery in partnership with Legal, HR, IT.
• Maintain controls, procedures, evidence, and audit documentation.
• Develop and analyze awareness metrics and program improvements.
• Collaborate with cross-functional teams to communicate cyber risks.
• Support forensic activities with proper custody and confidentiality.
• Develop annual Awareness Program plan and materials.

Skills

Communication

Phishing simulations

Email header analysis

Cross-functional collaboration

Security awareness

Education

Bachelor's degree

Tools

Microsoft 365

Microsoft Purview

Job description

Komatsu is seeking an IT Cybersecurity Compliance Analyst to strengthen security culture, compliance posture, and investigative readiness. You will own the Cybersecurity Awareness Program, drive employee education, phishing simulations, communications, metrics, and engagement across the business.

Additionally, you will support cybersecurity compliance activities, Legal Hold, and eDiscovery processes with a focus on confidentiality and data handling.