Cybersecurity Awareness & Education Analyst

The Cybersecurity Awareness & Education Analyst, reporting directly to the IT Risk Management Director, plays a critical role in fostering a culture of cybersecurity awareness across the organization, with a focus on the unique challenges of the construction industry. This role develops and delivers engaging education programs and communications that empower our internal team members and subcontractors to recognize and respond to cyber threats, understand industry compliance requirements, and safely handle sensitive data. The ideal candidate understands how to communicate security best practices to a diverse, often mobile workforce in a practical, accessible way.

Key Responsibilities:

• Design and implement CMMC S.O.P., cybersecurity awareness, and education programs tailored for a hybrid workforce, including field teams, subcontractors, and corporate staff. (e.g., short videos, toolbox talks, mobile-first modules) to fit construction site environments.
• Conduct regular phishing simulations and provide follow-up education based on results to improve awareness and response to social engineering attacks.
• Develop and distribute regular security communications, alerts, and guidance related programs.
• Report on educational program participation and effectiveness to leadership and audit teams.
• Stay current on evolving cyber threats in construction, including attacks on project management tools, supply chain risks, and mobile device vulnerabilities.

Other Responsibilities

• Team player who can work independently under general supervision, applying sound judgment within defined policies and procedures.
• Assist other members of the IT Risk Management team on security activities, such as user access needs, compliance requirements, and risk mitigation efforts in an ongoing effort.
• Identify and respond to risks by escalating or mitigating issues as necessary.
• Assist with ongoing maintenance and awareness of security policies and procedures to enforce controls and protect information assets from unauthorized or accidental modification, destruction, or disclosure.
• Analyze and report on security metrics to support continuous improvement and compliance.
• Engage with vendor technical support to resolve system-related issues as needed.
• Maintain professional, clear, and timely communication with peers, management, stakeholders, and external partners.
  

Knowledge, Skills, and Abilities:

• Excellent verbal and written communication skills, with the ability to explain technical concepts to non-technical stakeholders.
• Analytical mindset with strong problem-solving abilities, attention to detail, and a willingness to learn.
• Excellent organization and time-management skills; capable of prioritizing tasks to meet deadlines.
• Collaborative team player with a proactive approach and strong interpersonal skills.
• Familiarity with state and federal regulations related to cybersecurity (e.g., NIST, CMMC, etc.)

Qualifications:

• Associate's degree in information security, Computer Science, or a related field preferred, or 2-4 years equivalent work experience.
• Relevant certifications (CompTIA Security +, CompTIA Security Analyst (CySA+), GISF, etc.) are a plus.
• Experience developing education curriculum for diverse audiences and being able to deliver comprehensive education modules using multiple modalities.
• Knowledge of and best-practices experience working with access control technologies, identity management tools, security frameworks, and regulations such as NIST, CMMC, HIPAA, etc.
• Experience using learning management systems and remote learning tools, such as KnowBe4 and Microsoft Teams.
• Knowledge and experience in application security and the management and application of Role-based Access Control methods.
• Must be willing to travel, on occasion, to job sites to assist with awareness as needed.

Cianbro is an employee-owned, tobacco-free, equal opportunity employer, we do not discriminate based on marital status, race, color, creed, gender, sex, religion, national origin, gender identity, age, veteran status, union affiliation, physical or mental disability, citizenship status, sexual orientation, or genetic information.

Professionals