Security Awareness Analyst, Contractor

The Security Awareness Analyst will play a pivotal role in fostering a culture of security awareness across the organization. This includes designing and delivering engaging educational content developing incentive programs and leveraging gamification to make security best practices accessible and impactful. The analyst will lead in-person cybersecurity orientations to onboard new employees and integrate awareness initiatives during mergers and acquisitions (M&A). The analyst will also manage the simulated phishing program including deployment educational follow-ups and metrics tracking. A willingness to learn cybersecurity concepts and apply creative approaches to content development is essential. This position reports to the Senior Information Security Awareness Manager.

Join our team on a 12-month contract with the flexibility of fully remote work. This role is fully remote for candidates who reside outside the 50 mile radius of our San Ramon office. For candidates who reside within 50 miles of our San Ramon location this role is Hybrid and would require 3 days a week (M W TH) in our San Ramon office.

Key Responsibilities:

• Simulated Phishing Program Management: Manage end-to-end phishing simulations using platforms like KnowBe4 Cofense or ProofPoint including scenario design education and metrics analysis.
• Cross-Team Collaboration: Collaborate with the broader security team (GRC threat intelligence engineering) and departments such as HR IT Communications Privacy Compliance and Legal.
• Dashboard Development: Develop and maintain metrics dashboards to report on the performance and impact of security awareness programs.
• Internal Communications & Platform Management: Oversee content on SharePoint Slack email and digital displays to maximize engagement; build and maintain SharePoint sites; collaborate with vendors for multimedia and communications support.
• Cybersecurity Orientations: Conduct engaging in-person orientation sessions for new employees to instill core security knowledge.
• Gamification & Event Management: Organize and host security awareness events; enhance training through gamification.
• Social Media & Engagement Campaigns: Lead internal and external social media campaigns (e.g. Slack LinkedIn) to promote security content foster engagement and track campaign success.
• Swag & Incentives Program Management: Manage a security-focused storefront and incentive program using a vendor platform to boost participation.
• Mergers & Acquisitions (M&A) Integration: Partner with cross-functional teams to integrate tailored security awareness into newly acquired organizations and align practices.
• Change Management Support: Support cultural alignment during M&A by promoting security expectations and encouraging a shared security mindset.
• Graphic Design & Visual Content: Develop infographics compliance training visuals and digital content for security awareness initiatives using strong visual storytelling and design skills with Adobe Creative Suite.

Qualifications:

• Bachelors degree in graphic design Communications Marketing Training Learning & Development or related field or equivalent experience.
• 25 years of experience in security awareness internal communications or marketing with a strong desire to continue learning and a positive collaborative attitude.
• Strong history of taking full ownership of programs and delivering impactful results.
• Proven experience in developing and maintaining internal SharePoint sites.
• Demonstrated ability to develop data-driven dashboards to measure program effectiveness and inform strategy.
• Proven success in internal corporate social media campaigns that generate high engagement.
• Willingness to learn cybersecurity concepts to translate complex topics into user-friendly content.
• Strong communication skills to simplify and deliver technical content across all organizational levels.
• Excellent project and time management skills with the ability to manage multiple initiatives simultaneously.

Preferred Qualifications:

• Familiarity with cybersecurity and privacy principles is helpful but not required.
• Experience managing swag programs and incentives through third-party vendor platforms.
• Background in social media management or engagement strategy.
• Experience with Adobe Creative Suite is extremely preferred including Photoshop Illustrator InDesign etc.; a portfolio demonstrating in-depth graphic design expertise is required (non-proprietary work acceptable).
• Experience supporting security integration during mergers and acquisitions (M&A).
• Experience with phishing platforms such as KnowBe4 Cofense or ProofPoint is required including end-to-end management of phishing campaignscovering scenario design educational follow-ups and metrics analysis.
• Experience with delivering or developing role-based security training tailored for technical audiences such as coders engineers and developers.
• Experience with tools like Power BI to visualize and communicate program metrics effectively is a plus.