Information Security Awareness Analyst II — Training & Phishing

Cencora; Pennsylvania; On-site; USD 65,000 - 95,000; Full time

Benefits offered by this job

Medical benefits

Paid parental leave

Training programs

Job summary

Cencora is seeking an Information Security Human Risk Analyst II to coordinate and deliver human risk program activities. You will support security training, phishing simulations, onboarding, and awareness communications while translating security expectations into clear, engaging learning experiences.

The role involves coordinating training deployments, managing phishing campaigns, onboarding and role-based training, and producing audit-ready documentation for leadership review.

Qualifications

• Bachelor's degree or equivalent in MIS, Cybersecurity, Communications, or related field preferred.
• 2–4 years of related information security awareness, training operations, or program coordination experience desired.

Responsibilities

• Coordinate recurring and targeted Information Security training deployments.
• Support end-to-end simulated phishing campaign operations and post-campaign learning reinforcement.
• Manage Human Risk workstreams such as onboarding and role-based training.
• Draft learner communications, job aids, and SOPs with clear, behavior-focused language.
• Track milestones, risks, dependencies, and prepare status updates for stakeholders.
• Collect and maintain audit-ready evidence for training and communications.
• Review campaign results to identify trends and improvement opportunities.
• Coordinate with information security, HR, Legal, and business stakeholders as needed.

Skills

Phishing simulations

LMS experience

MS Office suite

Stakeholder collaboration

Communication skills

Education

Bachelor's degree or equivalent

Tools

SharePoint

Marketing Cloud

PowerPoint

Excel

Teams

Job description

Cencora is seeking an Information Security Human Risk Analyst II to coordinate and deliver human risk program activities. You will support security training, phishing simulations, onboarding, and awareness communications while translating security expectations into clear, engaging learning experiences.

The role involves coordinating training deployments, managing phishing campaigns, onboarding and role-based training, and producing audit-ready documentation for leadership review.