Information Security Analyst

Information Security Analyst 3Duration: 06+ Months (Potential to extend or convert)Preferred Locations: McLean, VA (Tysons Corner) and Chandler, AZ – Hybrid Role (3 days onsite, 2 days remote)Role will include:Contribute significantly to the development and implementation of a new, firm-wide Cyber Social Responsibility program to help educate employees and customers.Define the program's mission, goals, and key performance indicators (KPIs).Create and manage initiatives that extend cybersecurity awareness and best practices to our individual customers and the wider community.Develop partnerships with internal teams and external organizations to promote cybersecurity education and social responsibility.Create and distribute public-facing content on relevant cybersecurity topics (e.g., articles, webinars, social media campaigns).Analyze simulation results to identify trends, vulnerabilities, and areas for improvement.Develop and deliver targeted training and awareness materials based on simulation outcomes.Stakeholder engagement and/or community engagement.Familiarity with industry-standard cybersecurity frameworks (e.g., NIST, CRI).Experience designing, developing, and/or executing realistic social engineering simulations (e.g., phishing, vishing, smishing) to improve employee awareness and resilience.Strong understanding of cybersecurity principles, including threat landscape, risk management, and security controls.Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to non-technical audiences.Demonstrated project management and organizational skillsIdeally 5-8 years of experience in cybersecurity and/or program development, with a focus on security awareness, training, or a related field.Additional Notes from manager:The focus of this role is on Cyber Social Responsibility, a new initiative designed to make cybersecurity more approachable and less intimidating for everyday client's customers. The work centers on educating customers about protecting their personal and financial information through multiple touchpoints, including branch signage, customer emails, mobile app messaging, videos, social media, in-branch events, and webinars. The team is launching with a small pilot in core locations, with plans to scale to a full enterprise program in the second half of the year. The program will integrate with existing cyber defender initiatives, client advisors, marketing teams, government relations, and public policy partners.The ideal candidate will bring a blend of cybersecurity knowledge (5–8 years), stakeholder engagement, and program or project management experience, along with a strong creative mindset. While deep technical expertise is not required, candidates should understand cybersecurity concepts well enough to translate them into clear, customer-facing education. Experience working with government entities, trade associations, or regulatory bodies is highly valued. Strong written and verbal communication skills are essential, as the role involves interacting with diverse internal and external stakeholders.Key responsibilities include helping shape the strategy from the ground up, defining KPIs and success metrics, supporting the design and evolution of external training programs, and partnering with marketing teams to ensure customer education is segmented and tailored, rather than one-size-fits-all. The role will also contribute to planning and executing public-facing events and learning experiences. Power BI is used for data visualization and reporting.Hiring Manager also leads the Social Engineering program. The role is not strictly marketing-focused, but a creative or marketing-adjacent background is considered a strong plus. During interviews, candidates can expect discussions around how they would conceptualize and structure a program, demonstrate creative thinking, and communicate value at scale.