Title: Security Awareness & Training Analyst
Location: Houston, TX (Hybrid in 77024 – onsite twice a week)
Duration: Contract-to-Hire
Work Requirements: , Holders or Authorized to Work in the US. W2/Direct-employment only.

Key Points:

This position is NOT a hands-on security operations, cyber security analyst or engineer position. It will focus specifically on security awareness & training for end users.
Strong skills in phishing campaigns, targeted security awareness training campaigns, and corporate communications is required
This is a hybrid position, onsite 2-3 days a week in 77024.

Position Overview
Our client is seeking a Security Awareness & Training Analyst to support and execute cybersecurity awareness initiatives across the organization. This role will play a key part in strengthening employee security behaviors through simulated phishing campaigns, targeted security training, awareness communications, and program reporting.

The ideal candidate has hands-on experience managing security awareness programs and simulated phishing campaigns and understands how to translate real-world cybersecurity threats into engaging, relevant employee education. This position is highly focused on security awareness and training and is NOT a hands-on SOC, security operations, or cybersecurity engineering position.

The analyst will work closely with cybersecurity leadership, Corporate Ethics & Compliance, Organizational Change Management, Communications, and other internal stakeholders to execute awareness initiatives and measure their effectiveness.

Key Responsibilities:
Simulated Phishing Campaigns

Plan, coordinate, and execute simulated phishing campaigns across the organization.
Develop realistic phishing scenarios based on current threats, attacker techniques, and employee behaviors.
Use Proofpoint ZenGuide or comparable security awareness and phishing simulation platforms to manage campaigns.
Partner with platform vendors and internal stakeholders to develop and deploy campaigns.
Analyze campaign results, identify trends, and evaluate employee susceptibility to phishing and social engineering.
Identify areas where additional education or targeted awareness initiatives may be beneficial.
Recommend phishing scenarios and campaigns that reflect relevant, real-world threats and situations employees may encounter.

Security Awareness & Training

Identify and recommend cybersecurity awareness and training content based on organizational needs and emerging threats.
Review and leverage existing training content available through security awareness and learning platforms.
Coordinate targeted security training for specific employee populations, including privileged access users and employees handling sensitive information.
Recommend training initiatives to cybersecurity leadership for review and approval.
Coordinate training delivery with appropriate internal teams and stakeholders.
Help ensure awareness activities focus on improving employee security behaviors rather than simply completing mandatory training.

Annual Cybersecurity Training & Compliance

Partner with Corporate Ethics & Compliance to support annual mandatory cybersecurity training requirements.
Coordinate cybersecurity content included in the organization's annual employee training program.
Work with the organization's learning management system and related training platforms.
Help ensure cybersecurity training content meets internal program expectations and annual compliance requirements.

Security Awareness Communications

Partner with Organizational Change Management and Communications teams to develop and execute ongoing security awareness campaigns.
Contribute ideas and content for monthly security awareness communications.
Publish and maintain awareness content through internal communication platforms, including the corporate intranet and Viva Engage.
Help develop surveys, quizzes, scenarios, and other employee engagement materials.
Develop awareness content covering topics such as:
- Phishing and social engineering
- Data protection
- Access controls
- Privileged access
- Emerging cybersecurity threats
- Personal identity protection
Maintain and organize security awareness materials and communications.

Metrics & Reporting

Track and report results from simulated phishing campaigns and security awareness initiatives.
Monitor training participation and effectiveness.
Develop and maintain program metrics for cybersecurity leadership.
Analyze awareness trends and identify opportunities for additional employee education.
Communicate campaign results, program outcomes, and recommendations to cybersecurity leadership.

Required Qualifications:

Hands-on experience supporting or managing cybersecurity awareness and training programs.
Demonstrated experience planning, coordinating, and executing simulated phishing campaigns.
Foundational understanding of cybersecurity principles, common threats, and security concepts.
Understanding of the confidentiality, integrity, and availability (CIA) triad.
Strong written and verbal communication skills with the ability to explain cybersecurity concepts to a variety of audiences.
Strong organizational and project coordination skills, including the ability to manage campaigns, stakeholders, deadlines, and multiple deliverables.
Ability to translate relevant cybersecurity threats into meaningful employee training and awareness communications.
Ability to work independently and execute established awareness initiatives with limited day-to-day direction.

Preferred Qualifications:

Experience with Proofpoint ZenGuide or a comparable security awareness/phishing simulation platform.
Security awareness, phishing simulation, or cybersecurity-related certification.
Experience developing employee security awareness content.
Experience with cybersecurity training metrics, analytics, and reporting.
Experience working with corporate compliance, learning, communications, or organizational change teams.
Background in psychology, behavioral science, organizational change management, or a related field.
Experience using learning management systems or employee communication platforms.

Our benefits package includes:

Comprehensive medical benefits
Competitive pay
401(k) Retirement plan
...and much more!

About INSPYR Solutions:
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

Security Awareness & Training Analyst

Key skills

About this role