IT Compliance Analyst

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring.


Job Title: IT Compliance Analyst
Location: Harrisburg, PA 17120 (Hybrid)
Duration: 4 Months (Possible Extension)

Job Summary:
Under the direction of the IT Compliance and Risk Manager, this position serves as a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO), supporting the Governance, Risk, and Compliance (GRC) Department.
The Security Awareness and Compliance Analyst administers the organization's Security Awareness and Phishing Program and supports governance, risk, and compliance initiatives. The position develops and coordinates security awareness activities, manages phishing simulation campaigns, analyzes program effectiveness, and supports regulatory reporting while contributing to the overall maturity of the GRC program.

Key Responsibilities:
• Administers and maintains the enterprise Security Awareness Program.
• Plans, coordinates, and executes phishing simulation campaigns.
• Tracks, analyzes, and reports security awareness and phishing metrics using established reporting tools.
• Develops and distributes security awareness communications and educational materials.
• Coordinates required cybersecurity awareness training activities across the organization.
• Maintains awareness program documentation and records to support compliance and audit requirements.
• Assists with preparation of reports supporting regulatory requirements, audits, and management reviews.
• Recommends improvements to awareness activities based on metrics, emerging threats, and industry best practices.
• Assists with governance, risk, and compliance initiatives as assigned.
• Participates in continuous improvement activities supporting the organization's cybersecurity program.
• Performs related work as assigned.

Knowledge of:
• Information security awareness principles
• Cybersecurity fundamentals
• Security awareness and phishing simulation platforms
• Reporting and data analysis techniques
• Compliance and audit support activities

Ability to:
• Coordinate multiple projects and training activities
• Analyze program metrics and identify trends
• Communicate effectively with diverse audiences
• Develop user-friendly educational materials
• Establish productive working relationships with agency staff.