Cybersecurity Compliance & Awareness Analyst

Komatsu; Chicago (IL); On-site; USD 80,000 - 95,000; Full time

Benefits offered by this job

Health benefits

401k and/or employee savings programs

Paid vacation and holidays

Employee assistance programs

Disability benefits

Life insurance

Learning and development programs

Job summary

Komatsu is seeking an IT Cybersecurity Compliance Analyst to lead the Cybersecurity Awareness Program, drive employee education, phishing simulations, and engagement while supporting Legal Hold and eDiscovery activities within Microsoft 365. The role emphasizes cross-functional collaboration, data-driven metrics, and strong confidentiality for sensitive information.

The ideal candidate has 2+ years in cybersecurity compliance, excellent communication, and a solid understanding of phishing

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Information Assurance, Communications, Business, or related field.
• Two+ years of experience in cybersecurity compliance, awareness, eDiscovery, information governance, security ops, or related function.
• Experience with Microsoft 365 eDiscovery, including Purview.
• Excellent communication, interpersonal skills, capable of translating cybersecurity concepts to all business levels.
• Ability to maintain security control documentation.
• Experience with phishing simulation tools.
• Strong understanding of email header analysis for phishing indicators.

Responsibilities

• Own the Cybersecurity Awareness Program: strategy, communications, engagement, phishing simulations, training, metrics, and program maturity.
• Administer Legal Hold and eDiscovery lifecycle with Legal, HR, and IT: intake, custodian ID, preservation, tracking, validation, release coordination, documentation, chain-of-custody.
• Maintain cybersecurity controls, procedures, evidence, and documentation for audits and certifications (SOC 2, ISO 27001).
• Develop and analyze awareness, training, phishing, and compliance metrics; identify risks and improvements.
• Support forensic and investigative activities while protecting confidentiality and custody of evidence.
• Build cross-functional relationships to communicate cyber risks and drive awareness initiatives.
• Develop and execute annual Cybersecurity Awareness Program plan and materials.
• Coordinate translations of awareness content with global liaisons and business partners.
• Collaborate with communications, marketing, and technical teams to produce branded materials.
• Maintain or support eDiscovery in Microsoft 365 (Exchange, OneDrive, SharePoint, Teams) and preserve matter records.
• Support forensic imaging activities and maintain chain-of-custody documentation.
• Support audits by gathering and producing evidence related to awareness, training, and controls.
• Analyze cybersecurity compliance data to identify risks and drive continuous improvement.

Skills

Cybersecurity awareness

Phishing simulations

Communication skills

Security controls

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Microsoft Purview

Exchange/OneDrive/SharePoint/Teams

Job description

Komatsu is seeking an IT Cybersecurity Compliance Analyst to lead the Cybersecurity Awareness Program, drive employee education, phishing simulations, and engagement while supporting Legal Hold and eDiscovery activities within Microsoft 365. The role emphasizes cross-functional collaboration, data-driven metrics, and strong confidentiality for sensitive information.

The ideal candidate has 2+ years in cybersecurity compliance, excellent communication, and a solid understanding of phishing