Information Security Human Risk Analyst II

American Health Packaging; Northern (KY); Hybrid; USD 65,000 - 95,000; Full time

Job summary

Cencora is seeking an Information Security Human Risk Analyst II to coordinate security training, run phishing simulations, and support onboarding and learning programs. The role focuses on translating security expectations into clear, engaging, behavior-focused experiences for team members.

The position involves collaboration with information security, HR, legal, and business stakeholders, and requires strong written communication and detail orientation.

Qualifications

• Clear, business-focused writing and communications across audiences.
• Experience coordinating phishing simulations and training operations.
• Ability to manage multiple tasks with cross-functional stakeholders.
• Experience with Learning Management Systems.

Responsibilities

• Coordinate recurring and targeted information security training deployments.
• Support simulated phishing campaign operations from planning through reinforcement.
• Manage human risk workstreams like onboarding and role-based training.
• Draft learner communications and knowledge articles in clear, supportive language.
• Track milestones, risks, and open issues, provide status updates.

Education

Bachelor’s degree in MIS, Communications, Marketing, Cybersecurity, Business, Education, or related field

Tools

Microsoft Office

Excel

PowerPoint

SharePoint

Teams

Marketing Cloud

Job description

## Information Security Human Risk Analyst IIApply: Remote, Pennsylvania: Remote, Texas: Remote, SC: Full time: Posted Today: End Date: October 10, 2026 (14 days left to apply): R2615604Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!# **Job Details****Summary:** The Information Security Human Risk Analyst II coordinates and delivers Human Risk program activities under general direction. This role supports Information Security training, simulated phishing, onboarding, targeted learning, awareness communications, metrics, and audit-ready documentation. The Analyst II helps translate security expectations into clear, engaging, behavior-focused experiences that help team members spot, protect, and report potential security risks. **Responsibilities:** * Coordinate recurring and targeted Information Security training deployments, including population validation, assignment logistics, communication planning, completion monitoring, and stakeholder follow-up.* Support end-to-end simulated phishing campaign operations, including campaign planning inputs, template review, audience coordination, launch support, results review, and post-campaign learning reinforcement.* Manage assigned Human Risk workstreams such as new hire onboarding, role-based training, manager communications, accountability follow-ups, or communications updates under general direction.* Draft and refine learner communications, teaching moments, manager talking points, job aids, knowledge articles, and standard operating procedures using clear, supportive, and behavior-focused language.* Track milestones, risks, dependencies, decisions, and open issues for assigned initiatives and provide concise status updates to program leads and stakeholders.* Collect, organize, and maintain audit-ready evidence for training, phishing, acknowledgements, communications, and recurring operational processes.* Review campaign and training results to identify basic trends, improvement opportunities, learner support needs, or process gaps and recommend practical next steps.* Coordinate with cross-functional partners, including Information Security, communications, HR, Legal, Employee Relations, technology owners, and business stakeholders as needed.**Qualifications:*** Bachelor’s degree in Management Information Systems, Communications, Marketing, Cybersecurity, Business, Education, or a related field preferred, or equivalent work experience.* Requires 2–4 years of related experience in information security awareness, training operations, communications, phishing simulation, instructional support, or program coordination.**Skills and Knowledge:** * Demonstrated ability to manage multiple tasks, write clearly for business audiences, troubleshoot issues, and collaborate across stakeholder groups.* Experience with simulated phishing platforms, Learning Management Systems, Microsoft Office, Excel, PowerPoint, SharePoint, Teams, Marketing Cloud or similar communication tools, process documentation, multilingual coordination, campaign reporting, and basic metrics preferred.* Ability to blend technical information with plain-language writing, visual communication, and a supportive learning tone.* Exceptional attention-to-detail skillsets* Ability to work well both independently as well as within a team oriented environment