Job Details

Summary:

The Information Security Human Risk Analyst II coordinates and delivers Human Risk program activities under general direction. This role supports Information Security training, simulated phishing, onboarding, targeted learning, awareness communications, metrics, and audit-ready documentation. The Analyst II helps translate security expectations into clear, engaging, behavior-focused experiences that help team members spot, protect, and report potential security risks.

Responsibilities:

• Coordinate recurring and targeted Information Security training deployments, including population validation, assignment logistics, communication planning, completion monitoring, and stakeholder follow-up.
• Support end-to-end simulated phishing campaign operations, including campaign planning inputs, template review, audience coordination, launch support, results review, and post-campaign learning reinforcement.
• Manage assigned Human Risk workstreams such as new hire onboarding, role-based training, manager communications, accountability follow-ups, or communications updates under general direction.
• Draft and refine learner communications, teaching moments, manager talking points, job aids, knowledge articles, and standard operating procedures using clear, supportive, and behavior-focused language.
• Track milestones, risks, dependencies, decisions, and open issues for assigned initiatives and provide concise status updates to program leads and stakeholders.
• Collect, organize, and maintain audit-ready evidence for training, phishing, acknowledgements, communications, and recurring operational processes.
• Review campaign and training results to identify basic trends, improvement opportunities, learner support needs, or process gaps and recommend practical next steps.
• Coordinate with cross-functional partners, including Information Security, communications, HR, Legal, Employee Relations, technology owners, and business stakeholders as needed.
  

Qualifications:

• Bachelor’s degree in Management Information Systems, Communications, Marketing, Cybersecurity, Business, Education, or a related field preferred, or equivalent work experience.
• Requires 2–4 years of related experience in information security awareness, training operations, communications, phishing simulation, instructional support, or program coordination.

Skills and Knowledge:

• Demonstrated ability to manage multiple tasks, write clearly for business audiences, troubleshoot issues, and collaborate across stakeholder groups.
• Experience with simulated phishing platforms, Learning Management Systems, Microsoft Office, Excel, PowerPoint, SharePoint, Teams, Marketing Cloud or similar communication tools, process documentation, multilingual coordination, campaign reporting, and basic metrics preferred.
• Ability to blend technical information with plain-language writing, visual communication, and a supportive learning tone.
• Exceptional attention-to-detail skillsets
• Ability to work well both independently as well as within a team oriented environment

Schedule

Affiliated Companies

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned