Security Awareness & Training Analyst

INSPYR Solutions; Houston (TX); Hybrid; USD 70,000 - 110,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Competitive pay

401(k) Retirement plan

Job summary

INSPYR Solutions is seeking a Security Awareness & Training Analyst in Houston. The role focuses on driving end-user security education through simulated phishing campaigns, targeted training, and robust awareness communications.

You will measure effectiveness and partner with corporate teams to improve behaviors and compliance. The ideal candidate has hands-on experience managing awareness programs, with familiarity in phishing simulations and learning platforms.

Qualifications

• Hands-on experience supporting or managing cybersecurity awareness and training programs.
• Demonstrated experience planning, coordinating, and executing simulated phishing campaigns.
• Foundational understanding of cybersecurity principles, common threats, and security concepts.
• Understanding of the CIA triad.
• Strong written and verbal communication skills with ability to explain cybersecurity concepts to diverse audiences.
• Strong organizational and project coordination skills to manage campaigns, stakeholders, deadlines, and deliverables.
• Ability to translate threats into meaningful employee training and awareness communications.

Responsibilities

• Plan, coordinate, and execute simulated phishing campaigns across the organization.
• Develop realistic phishing scenarios based on current threats and employee behaviors.
• Use Proofpoint ZenGuide or comparable platforms to manage campaigns.
• Partner with vendors and stakeholders to deploy campaigns.
• Analyze results, identify trends, and evaluate employee susceptibility to phishing.

Skills

Phishing campaigns

Security awareness programs

Communication

Campaign analytics

End-user training

Tools

Proofpoint ZenGuide

Job description

Security Awareness & Training Analyst

Location: Houston, TX (Hybrid in 77024 – onsite twice a week). Duration: Contract-to-Hire. Work Requirements: US Citizen, GC Holders or Authorized to Work in the US. W2/Direct-employment only.

Key Points

• This position is NOT a hands-on security operations, cyber security analyst or engineer position. It will focus specifically on security awareness & training for end users.


• Strong skills in phishing campaigns, targeted security awareness training campaigns, and corporate communications is required


• This is a hybrid position, onsite 2-3 days a week in 77024.

Position Overview

Our client is seeking a Security Awareness & Training Analyst to support and execute cybersecurity awareness initiatives across the organization. This role will play a key part in strengthening employee security behaviors through simulated phishing campaigns, targeted security training, awareness communications, and program reporting.

The ideal candidate has hands-on experience managing security awareness programs and simulated phishing campaigns and understands how to translate real-world cybersecurity threats into engaging, relevant employee education. This position is highly focused on security awareness and training and is NOT a hands-on SOC, security operations, or cybersecurity engineering position.

The analyst will work closely with cybersecurity leadership, Corporate Ethics & Compliance, Organizational Change Management, Communications, and other internal stakeholders to execute awareness initiatives and measure their effectiveness.

Key Responsibilities

Simulated Phishing Campaigns

• Plan, coordinate, and execute simulated phishing campaigns across the organization.


• Develop realistic phishing scenarios based on current threats, attacker techniques, and employee behaviors.


• Use Proofpoint ZenGuide or comparable security awareness and phishing simulation platforms to manage campaigns.


• Partner with platform vendors and internal stakeholders to develop and deploy campaigns.


• Analyze campaign results, identify trends, and evaluate employee susceptibility to phishing and social engineering.


• Identify areas where additional education or targeted awareness initiatives may be beneficial.


• Recommend phishing scenarios and campaigns that reflect relevant, real-world threats and situations employees may encounter.

Security Awareness & Training

• Identify and recommend cybersecurity awareness and training content based on organizational needs and emerging threats.


• Review and leverage existing training content available through security awareness and learning platforms.


• Coordinate targeted security training for specific employee populations, including privileged access users and employees handling sensitive information.


• Recommend training initiatives to cybersecurity leadership for review and approval.


• Coordinate training delivery with appropriate internal teams and stakeholders.


• Help ensure awareness activities focus on improving employee security behaviors rather than simply completing mandatory training.

Annual Cybersecurity Training & Compliance

• Partner with Corporate Ethics & Compliance to support annual mandatory cybersecurity training requirements.


• Coordinate cybersecurity content included in the organization's annual employee training program.


• Work with the organization's learning management system and related training platforms.


• Help ensure cybersecurity training content meets internal program expectations and annual compliance requirements.

Security Awareness Communications

• Partner with Organizational Change Management and Communications teams to develop and execute ongoing security awareness campaigns.


• Contribute ideas and content for monthly security awareness communications.


• Publish and maintain awareness content through internal communication platforms, including the corporate intranet and Viva Engage.


• Help develop surveys, quizzes, scenarios, and other employee engagement materials.


• Develop awareness content covering topics such as:
  
  
  
  • Phishing and social engineering
  
  
  • Data protection
  
  
  • Access controls
  
  
  • Privileged access
  
  
  • Emerging cybersecurity threats
  
  
  • Personal identity protection
  
  


• Maintain and organize security awareness materials and communications.

Metrics & Reporting

• Track and report results from simulated phishing campaigns and security awareness initiatives.


• Monitor training participation and effectiveness.


• Develop and maintain program metrics for cybersecurity leadership.


• Analyze awareness trends and identify opportunities for additional employee education.


• Communicate campaign results, program outcomes, and recommendations to cybersecurity leadership.

Required Qualifications

• Hands-on experience supporting or managing cybersecurity awareness and training programs.


• Demonstrated experience planning, coordinating, and executing simulated phishing campaigns.


• Foundational understanding of cybersecurity principles, common threats, and security concepts.


• Understanding of the confidentiality, integrity, and availability (CIA) triad.


• Strong written and verbal communication skills with the ability to explain cybersecurity concepts to a variety of audiences.


• Strong organizational and project coordination skills, including the ability to manage campaigns, stakeholders, deadlines, and multiple deliverables.


• Ability to translate relevant cybersecurity threats into meaningful employee training and awareness communications.


• Ability to work independently and execute established awareness initiatives with limited day-to-day direction.

Preferred Qualifications

• Experience with Proofpoint ZenGuide or a comparable security awareness/phishing simulation platform.


• Security awareness, phishing simulation, or cybersecurity-related certification.


• Experience developing employee security awareness content.


• Experience with cybersecurity training metrics, analytics, and reporting.


• Experience working with corporate compliance, learning, communications, or organizational change teams.


• Background in psychology, behavioral science, organizational change management, or a related field.


• Experience using learning management systems or employee communication platforms.

Our benefits package includes:

• Comprehensive medical benefits


• Competitive pay


• 401(k) Retirement plan


• ...and much more!

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

Equal Employment Opportunities Statement

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants Requiring Reasonable Accommodation

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.