Security Awareness & Phishing Program Analyst

Software Technology, Inc.; Harrisburg (Dauphin County); On-site; USD 60,000 - 90,000; Full time

Job summary

Software Technology, Inc. is seeking a Security Awareness and Compliance Analyst to administer the organization’s Security Awareness and Phishing Program and support governance, risk, and compliance initiatives.

The role develops and coordinates security awareness activities, manages phishing simulation campaigns, analyzes program effectiveness, and contributes to regulatory reporting while advancing the GRC program maturity.

Qualifications

• Knowledge of information security awareness principles and practices.
• Solid grounding in cybersecurity fundamentals and risk concepts.
• Experience with phishing simulation platforms and campaigns.
• Ability to analyze security metrics and generate actionable reports.
• Familiarity with regulatory reporting and audit support.

Responsibilities

• Administers and maintains the enterprise Security Awareness Program.
• Plans, coordinates, and executes phishing simulation campaigns.
• Tracks, analyzes, and reports security awareness metrics using reporting tools.
• Develops and distributes security awareness communications and materials.
• Coordinates security awareness training activities across the organization.
• Maintains program documentation to support compliance and audits.
• Prepares reports for regulatory requirements, audits, and reviews.
• Recommends improvements based on metrics and threats.
• Supports governance, risk, and compliance initiatives as assigned.

Skills

Information security awareness

Cybersecurity fundamentals

Phishing simulation platforms

Reporting and data analysis

Compliance and audit support

Job description

Software Technology, Inc. is seeking a Security Awareness and Compliance Analyst to administer the organization’s Security Awareness and Phishing Program and support governance, risk, and compliance initiatives.

The role develops and coordinates security awareness activities, manages phishing simulation campaigns, analyzes program effectiveness, and contributes to regulatory reporting while advancing the GRC program maturity.