Position: Security Compliance Analyst (Ref: 18598)
Location: Harrisburg, PA USA, 17101
Salary: $25.88/hr.
Duration: 10 Months 18 Days - Contract
Openings: 1
Deadline: 08/14/2026
Description:
***Local Candidates
***Hybrid- onsite 3 days/week
We are seeking a Security Awareness and Compliance Analyst to join our Governance, Risk, and Compliance (GRC) team. Under the direction of the IT Compliance and Risk Manager, this role will primarily focus on administering the enterprise Security Awareness and Phishing Program, as well as supporting broader GRC initiatives.
The ideal candidate will develop security awareness campaigns, manage phishing simulations, analyze program effectiveness, and assist with regulatory and compliance reporting to strengthen overall cybersecurity maturity.
Key Responsibilities
• Security Awareness Administration: Plan, coordinate, and execute the enterprise-wide Security Awareness Program and required cybersecurity training activities.
• Phishing Campaign Management: Design, deploy, and manage organization-wide phishing simulation campaigns.
• Metrics & Reporting: Track, analyze, and report security awareness and phishing metrics using established tools to identify trends and measure effectiveness.
• Communications & Education: Develop and distribute user-friendly security awareness communications, training materials, and educational content.
• Audit & Compliance Support: Maintain program documentation, records, and reports to support regulatory requirements, audits, and management reviews.
• Program Improvement: Recommend continuous improvements to security awareness activities based on analytics, emerging threats, and industry best practices.
• GRC Support: Assist with broader governance, risk evaluation, and compliance initiatives as assigned.
Key Qualifications & Capabilities
• Knowledge of Security Fundamentals: Strong understanding of information security awareness principles, cybersecurity fundamentals, and compliance/audit support activities.
• Platform Experience: Hands-on experience with security awareness and phishing simulation platforms.
• Analytical Skills: Proficiency in data analysis, reporting techniques, and metric evaluation.
• Communication: Ability to communicate complex security concepts effectively to diverse non-technical audiences and build productive working relationships across teams.
• Project Management: Capability to coordinate multiple training activities, documentation updates, and compliance tasks simultaneously.
Working Conditions:
• Position Type: Contract
• Work Schedule: Hybrid (3 Days On-Site / 2 Days Remote)
• Location: Harrisburg, PA
Required / Desired Skills
• Plans, coordinates, and executes phishing simulation campaigns. Required - 2 Years
• Administers and maintains the enterprise Security Awareness Program. Required - 2 Years
• Develops and distributes security awareness communications and educational materials. Required - 2 Years
• Assists with preparation of reports supporting regulatory requirements, audits, and management reviews. Required - 2 Years
• Maintain awareness program documentation and records to support compliance and audit requirements. Required - 2 Years
• Recommend improvements to awareness activities based on metrics, emerging threats, and industry best practices. Required - 2 Years