Security Awareness Analyst (Level I or II)

About St. Jude

There’s a reason St. Jude Children’s Research Hospital consistently earns a Glassdoor Employee Choice Award and is named to its "Best Place to Work" list. At our world-class pediatric research hospital, every one of our professionals shares our commitment to make a difference in the lives of the children we serve. There is a unique bond when you are part of a team that gives their all to advance the treatments and cures of pediatric catastrophic diseases. The result is a collaborative, positive environment where everyone, regardless of their role, receives the resources, support, and encouragement to advance and grow their careers.

About the Role

Are you passionate about translating security threats into impactful education and culture change? We’re looking for a dynamic Security Awareness Analyst to join our security awareness and culture team. You’ll help run our social engineering program, launch engaging phishing campaigns, deliver general awareness and role-based training, and support our incredible Security Awareness Ambassadors Program. From metrics to messaging, you’ll play a central role in empowering people and reducing human risk across the organization.

This position may be eligible for the possibility of remote work.

What You'll Do:

Social Engineering Program: 

• Execute phishing simulations aligned with emerging threats and behavioral insights.
• Develop phishing training that resonates with diverse audiences across the organization.
• Support educational campaigns, challenges, and phishing tournaments.

Security Ambassador Program:

• Support the day-to-day operations of our Security Awareness Ambassadors Program, fostering a network of department-level champions.
• Create program materials, monthly toolkits, and communications to support ambassador engagement.
• Facilitate ambassador recognition, professional development opportunities, and collaboration forums. 

Campaigns & Communications:

• Design and deploy strategic awareness campaigns that support cyber and physical security initiatives:
• Write and distribute engaging communications, including threat alerts, newsletters, intranet updates, and executive summaries.
• Create polished visuals—infographics, slides, and guides—that align with corporate brand standards. 

 

Training & Education Development: 

• Assists in delivering role-based security training in partnership with security SMEs and external partners.
• Assist in development of training materials for both technical and general audiences.
• Track completions, gather feedback, and continuously improve content for impact and clarity. 

Cross-Functional Collaboration:

• Collaborate with Internal Communications, Legal, Compliance, Human Resources, and other internal partners to ensure awareness messages are timely, accurate, and coordinated.
• Partner with information security SMEs to align messaging with enterprise risk priorities.
• Support employee outreach events 

  

Metrics & Reporting:

• Collect and analyze data tied to simulations, training, ambassador activities, and employee behavior.
• Translate insights into clear, actionable dashboards and reports for leadership.

What You’ll Love:

• Helping shape a security-aware culture.
• Being part of a growing team that values creativity, empathy, and innovation.
• Having the freedom to pitch bold ideas and see them come to life.
• Making a m