[Hiring] Information Security Human Risk Analyst II @Cencora

Role Description

The Information Security Human Risk Analyst II coordinates and delivers Human Risk program activities under general direction. This role supports Information Security training, simulated phishing, onboarding, targeted learning, awareness communications, metrics, and audit-ready documentation. The Analyst II helps translate security expectations into clear, engaging, behavior-focused experiences that help team members spot, protect, and report potential security risks.

• Coordinate recurring and targeted Information Security training deployments, including population validation, assignment logistics, communication planning, completion monitoring, and stakeholder follow-up.
• Support end-to-end simulated phishing campaign operations, including campaign planning inputs, template review, audience coordination, launch support, results review, and post-campaign learning reinforcement.
• Manage assigned Human Risk workstreams such as new hire onboarding, role-based training, manager communications, accountability follow-ups, or communications updates under general direction.
• Draft and refine learner communications, teaching moments, manager talking points, job aids, knowledge articles, and standard operating procedures using clear, supportive, and behavior-focused language.
• Track milestones, risks, dependencies, decisions, and open issues for assigned initiatives and provide concise status updates to program leads and stakeholders.
• Collect, organize, and maintain audit-ready evidence for training, phishing, acknowledgements, communications, and recurring operational processes.
• Review campaign and training results to identify basic trends, improvement opportunities, learner support needs, or process gaps and recommend practical next steps.
• Coordinate with cross-functional partners, including Information Security, communications, HR, Legal, Employee Relations, technology owners, and business stakeholders as needed.

Qualifications

• Bachelor’s degree in Management Information Systems, Communications, Marketing, Cybersecurity, Business, Education, or a related field preferred, or equivalent work experience.
• Requires 2–4 years of related experience in information security awareness, training operations, communications, phishing simulation, instructional support, or program coordination.

Requirements

• Demonstrated ability to manage multiple tasks, write clearly for business audiences, troubleshoot issues, and collaborate across stakeholder groups.
• Experience with simulated phishing platforms, Learning Management Systems, Microsoft Office, Excel, PowerPoint, SharePoint, Teams, Marketing Cloud or similar communication tools, process documentation, multilingual coordination, campaign reporting, and basic metrics preferred.
• Ability to blend technical information with plain-language writing, visual communication, and a supportive learning tone.
• Exceptional attention-to-detail skillsets.
• Ability to work well both independently as well as within a team-oriented environment.

Benefits

• Compensation, benefits, and resources that enable a highly inclusive culture.
• Traditional offerings like medical, dental, and vision care.
• Comprehensive suite of benefits focusing on physical, emotional, financial, and social wellness.
• Support for working families, including backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
• Variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more.