OA-EISO-BA2-Compliance Analyst

Security Awareness & Compliance Analyst

Location: Harrisburg, PA/Hybrid 3 days in office

Duration: 4- month Contract

Pay Rate: 25.85

About The Role

We're seeking a Security Awareness & Compliance Analyst to join the Enterprise Information Security Office (EISO) and support the Governance, Risk, and Compliance (GRC) team. This role is ideal for a cybersecurity professional who enjoys combining security awareness, training, communications, compliance, and data analysis to help strengthen an organization's security culture.

In this position, you'll administer enterprise-wide security awareness initiatives, coordinate phishing simulation campaigns, analyze program effectiveness, and support compliance and audit activities. You'll play a key role in helping employees recognize cybersecurity threats while supporting broader governance, risk, and compliance objectives.

What You'll Do

• Administer and maintain the enterprise Security Awareness Program
• Plan, coordinate, and execute phishing simulation campaigns
• Track, analyze, and report on security awareness and phishing metrics
• Develop security awareness communications, educational content, and training materials
• Coordinate cybersecurity awareness training across the organization
• Maintain program documentation to support compliance and audit requirements
• Assist with regulatory reporting, management reviews, and audit preparation
• Recommend improvements based on program metrics, industry trends, and emerging threats
• Support Governance, Risk, and Compliance (GRC) initiatives
• Participate in continuous improvement efforts across the cybersecurity program

Required Qualifications

• Experience supporting information security, cybersecurity awareness, compliance, risk management, or related programs
• Understanding of cybersecurity fundamentals and security awareness best practices
• Experience analyzing metrics, creating reports, and identifying trends
• Strong written and verbal communication skills
• Experience coordinating multiple projects, initiatives, or training programs
• Ability to develop user-friendly communications and educational materials
• Strong organizational and documentation skills

Preferred Qualifications

• Experience administering security awareness or phishing simulation platforms (KnowBe4, Cofense, Proofpoint, Microsoft Attack Simulation Training, Mimecast, etc.)
• Experience supporting compliance, audit, governance, or risk management activities
• Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls
• Experience creating dashboards and reports using Excel, Power BI, or similar tools
• Experience working within regulated environments such as government, healthcare, financial services, or higher education

Ideal Backgrounds

Candidates May Come From Backgrounds Such As

• Security Awareness Analyst
• Security Awareness Coordinator
• Information Security Analyst
• Cybersecurity Compliance Analyst
• GRC Analyst
• IT Compliance Analyst
• Risk & Compliance Analyst
• Information Assurance Analyst
• Security Training Specialist
• Cybersecurity Program Coordinator

Why Apply?

This role offers the opportunity to make a meaningful impact on organizational cybersecurity by helping employees recognize threats, improve security behaviors, and support compliance initiatives. You'll work alongside cybersecurity and compliance professionals while gaining exposure to enterprise governance, risk, and security programs.

#INDEPI