Information Security Human Risk Analyst II

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

The Information Security Human Risk Analyst II coordinates and delivers Human Risk program activities under general direction. This role supports Information Security training, simulated phishing, onboarding, targeted learning, awareness communications, metrics, and audit-ready documentation. The Analyst II helps translate security expectations into clear, engaging, behavior-focused experiences that help team members spot, protect, and report potential security risks.

• Coordinate recurring and targeted Information Security training deployments, including population validation, assignment logistics, communication planning, completion monitoring, and stakeholder follow-up.
• Support end-to-end simulated phishing campaign operations, including campaign planning inputs, template review, audience coordination, launch support, results review, and post-campaign learning reinforcement.
• Manage assigned Human Risk work streams such as new hire onboarding, role-based training, manager communications, accountability follow-ups, or communications updates under general direction.
• Draft and refine learner communications, teaching moments, manager talking points, job aids, knowledge articles, and standard operating procedures using clear, supportive, and behavior-focused language.
• Track milestones, risks, dependencies, decisions, and open issues for assigned initiatives and provide concise status updates to program leads and stakeholders.
• Collect, organize, and maintain audit-ready evidence for training, phishing, acknowledgements, communications, and recurring operational processes.
• Review campaign and training results to identify basic trends, improvement opportunities, learner support needs, or process gaps and recommend practical next steps.
• Coordinate with cross-functional partners, including Information Security, communications, HR, Legal, Employee Relations, technology owners, and business stakeholders as needed.

Bachelor’s degree in Management Information Systems, Communications, Marketing, Cybersecurity, Business, Education, or a related field preferred, or equivalent work experience.

Requires 2-4 years of related experience in information security awareness, training operations, communications, phishing simulation, instructional support, or program coordination.

• Demonstrated ability to manage multiple tasks, write clearly for business audiences, troubleshoot issues, and collaborate across stakeholder groups.
• Experience with simulated phishing platforms, Learning Management Systems, Microsoft Office, Excel, PowerPoint, SharePoint, Teams, Marketing Cloud or similar communication tools, process documentation, multilingual coordination, campaign reporting, and basic metrics preferred.
• Ability to blend technical information with plain-language writing, visual communication, and a supportive learning tone.
• Exceptional attention-to-detail skillsets.
• Ability to work well both independently as well as within a team oriented environment.

• We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day.
• In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and…