[Hiring] Information Security Human Risk Analyst I @Cencora

Role Description

The Information Security Human Risk Analyst-I supports the day-to-day execution of Cencora’s Human Risk program, including:

• Information Security training
• Simulated phishing
• Onboarding
• Awareness communications
• Reporting support
• Program documentation

This role helps deliver consistent, timely, and learner-centered security education that reinforces secure behaviors and supports the organization’s ability to reduce human-related cybersecurity risk.

Responsibilities

• Support recurring Information Security training assignments, including:
  • Learner population review
  • Course assignment preparation
  • Completion tracking
  • Reminder coordination
  • Basic issue resolution
• Assist with simulated phishing campaign operations, including:
  • Campaign setup inputs
  • Test group validation
  • Launch readiness checks
  • Post-campaign tracking
  • Learner follow-up activities
• Help maintain new hire onboarding security awareness activities, including:
  • Enrollment support
  • Completion monitoring
  • Coordination of standard communications
• Monitor and triage Human Risk shared inboxes or intake channels, respond to routine questions using approved guidance, and escalate non-standard inquiries to more senior team members.
• Maintain program documentation, trackers, runbooks, mySecurity content, job aids, and evidence repositories to support consistent execution and audit readiness.
• Assist with routine reporting by gathering data, updating status logs, validating basic completion information, and preparing inputs for team dashboards or stakeholder updates.
• Follow documented procedures, identify incomplete or inconsistent information, and raise process, data, or stakeholder issues with clear context and recommended next steps where possible.

Qualifications

• Bachelor’s degree in Information Systems, Communications, Marketing, Cybersecurity, Business, Education, or a related field preferred, or equivalent work experience.
• Foundational understanding of information security awareness, training operations, communications, customer service, and data tracking.
• 2+ years of related experience or equivalent education/work experience.
• Demonstrates foundational knowledge of cybersecurity principles, threat concepts, security controls, risk management, and data protection practices.
• Uses analytical and problem-solving skills to review security information, identify issues, and support practical remediation actions.
• Communicates clearly with team members and stakeholders to document findings, escalate concerns, and support coordinated security activities.
• Applies attention to detail when handling alerts, documentation, evidence, and process steps to improve accuracy and consistency.
• Builds working knowledge of security tools, policies, standards, and operating procedures to support effective execution in a controlled environment.
• Manages assigned tasks with discipline, curiosity, and sound judgment while developing technical capability and professional maturity.
• Strong written communication, attention to detail, organization, follow-through, and willingness to learn enterprise tools and processes.
• Experience with Microsoft Office, Excel, SharePoint, Microsoft Teams, Learning Management Systems, simulated phishing tools, basic reporting, process documentation, and security awareness content preferred.
• Ability to manage assigned tasks, meet deadlines, ask good questions, and support a friendly, non-punitive learning experience for team members.

Benefits

• Compensation, benefits, and resources that enable a highly inclusive culture.
• Traditional offerings like medical, dental, and vision care.
• Comprehensive suite of benefits focusing on physical, emotional, financial, and social wellness.
• Support for working families, including:
  • Backup dependent care
  • Adoption assistance
  • Infertility coverage
  • Family building support
  • Behavioral health solutions
  • Paid parental leave
  • Paid caregiver leave
• Variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and more.