Security Awareness & Phishing Program Analyst

STI; Harrisburg (Dauphin County); On-site; USD 65,000 - 95,000; Full time

Job summary

STI is seeking a Security Awareness and Compliance Analyst to administer the organization’s Security Awareness and Phishing Program and support governance, risk, and compliance initiatives. You will develop and coordinate awareness activities, manage phishing simulations, and assist with regulatory reporting.

The role focuses on measuring program effectiveness, maintaining documentation for audits, and driving continuous improvement of the cybersecurity awareness program across the enterprise.

Qualifications

• Information security awareness principles.
• Cybersecurity fundamentals knowledge.
• Experience with security awareness and phishing simulation platforms.
• Reporting and data analysis techniques.
• Compliance and audit support activities.

Responsibilities

• Administers and maintains the enterprise Security Awareness Program.
• Plans, coordinates, and executes phishing simulation campaigns.
• Tracks, analyzes, and reports security awareness and phishing metrics.
• Develops and distributes security awareness communications and educational materials.
• Coordinates required cybersecurity awareness training activities across the organization.
• Maintains awareness program documentation and records to support compliance and audit requirements.
• Assists with preparation of reports supporting regulatory requirements, audits, and management reviews.
• Recommends improvements to awareness activities based on metrics and best practices.

Skills

Information security awareness

Cybersecurity fundamentals

Security awareness platforms

Reporting and data analysis

Compliance and audits

Tools

Phishing simulation platforms

Job description

STI is seeking a Security Awareness and Compliance Analyst to administer the organization’s Security Awareness and Phishing Program and support governance, risk, and compliance initiatives. You will develop and coordinate awareness activities, manage phishing simulations, and assist with regulatory reporting.

The role focuses on measuring program effectiveness, maintaining documentation for audits, and driving continuous improvement of the cybersecurity awareness program across the enterprise.