Security Awareness Analyst

Position Summary: The Security Awareness Analyst is responsible for supporting the planning, development, implementation, and maintenance of the organization's security awareness program. A key function of this role is to manage the flow of security-related communications, ensuring that information from various security teams is organized, translated, and disseminated effectively to the appropriate audiences within the organization. This role focuses on managing human risk by educating the workforce, changing behaviors, and fostering a strong security culture. The analyst will work to identify, prioritize, and manage human risks, aligning security awareness efforts with the organization's strategic security priorities.

Primary Accountabilities: 

Administrative (40%)

• Serve as the central point of contact for security communications, receiving updates and information from different security teams.

• Organize and translate complex technical information from security teams into easily understandable formats for various audiences, including employees, management, and executives.

• Support efforts to embed a strong security culture into the organization's overall culture.

• Help communicate the value of the security awareness program to senior leadership in business terms.

• Ensure compliance with key standards and regulations.

Operational (30%)

• Conduct security awareness assessment exercises, to include Phishing Campaign administration and metric reporting.

• Develop and maintain a security communication plan to ensure timely and relevant information is distributed through appropriate channels.

• Support the delivery of training through various methods, such as instructor-led training (ILT), virtual live training (VLT), and computer-based training (CBT).

• Assist in developing reinforcement methods, including newsletters, infographics, podcasts, and other training activities.

• Collaborate with internal teams (IT, HR, Compliance) to align security awareness initiatives with organizational goals.

• Assist in measuring the impact of the security awareness program and tracking the reduction in human risk.

• Stay informed about the latest cyber threats, tactics, techniques, and procedures used in human-based attacks.

• Experience in managing phishing awareness campaigns using KnowBe4 platform administration 

Strategic and Analytical (30%)

• Assist in identifying and prioritizing the organization’s top human risks and defining behaviors that manage those risks.

• Help develop and implement a strategic plan that prioritizes human risk, manages behaviors, and promotes behavior change.

• Contribute to the creation of engaging training programs and communications, adapting content for diverse demographics, cultures, and regions.

• Help define the organization's security culture and identify indicators of a strong security culture.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Communications, Business Administration, or a related field. Equivalent experience and certifications may be considered in place of a degree.

• 3-5 years of experience in security awareness, cybersecurity, training, or communications roles.; or any equivalent combination of experience and training that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position

• Proven ability to translate technical information into clear, concise communications for diverse audiences.

• Knowledge of learning theory, behavior change models, and cultural analysis.

• Understanding of risk management principles and processes.

• Familiarity with security awareness frameworks and standards.

• Strong communication and interpersonal skills.

• Ability to work collaboratively with cross-functional teams.

Pre