Security Awareness & Training Analyst

About the role

Our client is seeking a Security Awareness & Training Analyst to support and execute cybersecurity awareness initiatives across the organization. This role will play a key part in strengthening employee security behaviors through simulated phishing campaigns, targeted security training, awareness communications, and program reporting. The ideal candidate has hands-on experience managing security awareness programs and simulated phishing campaigns and understands how to translate real-world cybersecurity threats into engaging, relevant employee education.

This position is highly focused on security awareness and training and is NOT a hands-on SOC, security operations, or cybersecurity engineering position. The analyst will work closely with cybersecurity leadership, Corporate Ethics & Compliance, Organizational Change Management, Communications, and other internal stakeholders to execute awareness initiatives and measure their effectiveness. Strong skills in phishing campaigns, targeted security awareness training campaigns, and corporate communications are required.

Responsibilities

Simulated Phishing Campaigns

• Plan, coordinate, and execute simulated phishing campaigns across the organization.
• Develop realistic phishing scenarios based on current threats, attacker techniques, and employee behaviors.
• Use Proofpoint ZenGuide or comparable security awareness and phishing simulation platforms to manage campaigns.
• Partner with platform vendors and internal stakeholders to develop and deploy campaigns.
• Analyze campaign results, identify trends, and evaluate employee susceptibility to phishing and social engineering.
• Identify areas where additional education or targeted awareness initiatives may be beneficial.
• Recommend phishing scenarios and campaigns that reflect relevant, real-world threats and situations employees may encounter.

Security Awareness & Training

• Identify and recommend cybersecurity awareness and training content based on organizational needs and emerging threats.
• Review and leverage existing training content available through security awareness and learning platforms.
• Coordinate targeted security training for specific employee populations, including privileged access users and employees handling sensitive information.
• Recommend training initiatives to cybersecurity leadership for review and approval.
• Coordinate training delivery with appropriate internal teams and stakeholders.