Security Awareness & Compliance Analyst - Phishing & GRC

Mbi Llc; Harrisburg, Northern (Dauphin County, KY); Hybrid; USD 75,000 - 95,000; Full time

Job summary

Mbi Llc is seeking a Security Awareness and Compliance Analyst to support the Commonwealth's GRC initiatives within the EISO. You will administer the Security Awareness Program, manage phishing simulations, and analyze program effectiveness to drive improvements.

The role includes coordinating training, generating regulatory reports, and contributing to the maturity of the GRC program through continuous improvements and collaboration with agency staff.

Qualifications

• Experience administering security awareness programs.
• Experience planning phishing simulation campaigns.
• Ability to analyze metrics and report findings.
• Strong communication with diverse audiences.
• Familiarity with governance, risk, and compliance concepts.

Responsibilities

• Administers and maintains the enterprise Security Awareness Program.
• Plans, coordinates, and executes phishing simulation campaigns.
• Tracks, analyzes, and reports security awareness metrics using reporting tools.
• Develops and distributes security awareness communications and educational materials.
• Coordinates cybersecurity awareness training activities across the organization.
• Maintains awareness program documentation and records for compliance and audits.
• Assists with regulatory reporting and management reviews.

Skills

Security awareness

Phishing simulations

Regulatory reporting

Data analysis

Communication

Governance, Risk, Compliance

Tools

Phishing simulation platforms

Reporting tools

Compliance tracking systems

Job description

Mbi Llc is seeking a Security Awareness and Compliance Analyst to support the Commonwealth's GRC initiatives within the EISO. You will administer the Security Awareness Program, manage phishing simulations, and analyze program effectiveness to drive improvements.

The role includes coordinating training, generating regulatory reports, and contributing to the maturity of the GRC program through continuous improvements and collaboration with agency staff.