Analyst, Information Security GRC

Support awareness communications such as newsletters, articles, email campaigns, intranet posts, manager updates, event invitations, and reminder messages.

Translate technical cyber security topics into clear, accessible, and employee-friendly messaging.

Support the security awareness training lifecycle, including content updates, testing, launch coordination, completion tracking, reminders, and evidence retention.

Assist with targeted, role-based, regional, and regulatory training activities, including stakeholder reviews, approvals, and supporting documentation.

Support phishing simulation campaigns, including preparation, testing, audience coordination, communications, reporting, and post-campaign follow-up.

Compile and maintain program metrics, including training completion, campaign engagement, phishing simulation outcomes, reporting rates, and communication performance.

Support the preparation of dashboards, leadership updates, meeting materials, and program reports.

Maintain organized records of approvals, communications, process documentation, evidence, and supporting materials.

Coordinate with stakeholders across Information Security, Technology, Communications, HR, Learning and Development, Facilities, and business teams.

Assist with virtual and in-person awareness events, including speaker coordination, event briefs, calendar invites, promotional materials, volunteer coordination, and post-event follow-up.

Qualifications:

Experience in cyber security awareness, human risk, training, communications, and employee education.

Strong written communication skills, with the ability to make complex topics clear, simple, and engaging.

Good attention to detail and the ability to manage multiple tasks, deadlines, and stakeholders.

Strong organizational skills and confidence maintaining trackers, documentation, and structured records.

Ability to work collaboratively with technical and non-technical colleagues across different teams and regions.

Comfortable using Microsoft Office tools, including Word, PowerPoint, Excel, Outlook, Teams, and SharePoint.

Willingness to learn about phishing, social engineering, data protection, identity and access management, secure working practices, AI-related risks, and emerging cyber threats.

Ability to handle sensitive information responsibly and maintain confidentiality.

A proactive, curious, and improvement-focused mindset.

Preferred Experience:

Experience with cyber security awareness programs, phishing simulations, security training platforms, employee engagement campaigns.

Experience drafting internal communications, newsletters, articles, presentations, training materials.

Experience coordinating campaigns, events, workshops, stakeholder reviews, approval processes.

Familiarity with reporting metrics and dashboards.

Basic understanding of cyber security topics such as password security, multi-factor authentication, data handling, AI-related risks, and incident management.

Experience working in a regulated, financial services, professional services, or global corporate environment.

What We Offer:

You will have the opportunity to contribute to a global cyber security awareness program, work with stakeholders across the business, and develop practical experience in cyber security, communications, training, reporting, and human risk management.