> Markdown version of [/jobs/ext/2557728-it-compliance-specialist](https://www.wearedevelopers.com/jobs/ext/2557728-it-compliance-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Compliance Specialist

- **Company:** DevCare Solutions
- **Location:** Harrisburg, PA, United States (Remote available)
- **Salary:** $49,920.0 - $62,400.0
- **Contract:** Permanent contract
- **Skills:** Software Documentation, Information Security Management, Smartsuite, Phishing
- **Published:** August 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=90bd108b6a9ddc5c

## About the Role

Candidates should have experience with one or more of the following:

 * Security Awareness Programs
 * Phishing Simulation Campaigns
 * Cybersecurity Awareness Training
 * Security Awareness Communications
 * Security Compliance
 * GRC / Governance, Risk & Compliance
 * Audit and regulatory support
 * Security metrics and reporting
 * Risk assessment and cybersecurity fundamentals

Required Experience

The successful candidate should be able to demonstrate experience in:

 * Planning, coordinating, and executing phishing simulation campaigns
 * Administering and maintaining an enterprise Security Awareness Program
 * Developing and distributing security awareness communications and educational materials
 * Maintaining program documentation and records for compliance and audits
 * Preparing reports for regulatory requirements, audits, and management reviews
 * Using security awareness metrics, emerging threats, and industry best practices to recommend program improvements

Preferred Skills

Experience with security awareness or phishing simulation platforms such as KnowBe4, Proofpoint, Cofense, Hoxhunt, or similar tools is highly desirable.

Additional experience with the following is a plus:

 * Security awareness metrics and dashboards
 * Cybersecurity training platforms
 * GRC tools
 * Security compliance frameworks
 * Risk assessments
 * Audit preparation
 * Regulatory reporting
 * Security communications and employee education

## Description

We are seeking a Security Awareness & Compliance Analyst to support the Commonwealth of Pennsylvania's Enterprise Information Security Office (EISO) within the Governance, Risk, and Compliance (GRC) function.

This position will focus on administering the organization's Security Awareness and Phishing Program while supporting cybersecurity governance, risk, compliance, audit, and continuous improvement initiatives.

The ideal candidate will have hands-on experience with security awareness programs, phishing simulations, cybersecurity training, compliance reporting, security metrics, and audit support., * Administer and maintain the enterprise Security Awareness Program.

 * Plan, coordinate, and execute phishing simulation campaigns.
 * Track, analyze, and report security awareness and phishing metrics.
 * Monitor campaign results and identify trends and areas for improvement.
 * Develop and distribute security awareness communications and educational materials.
 * Coordinate required cybersecurity awareness training across the organization.
 * Maintain security awareness documentation and records for compliance and audit purposes.
 * Assist with regulatory reporting, audits, management reviews, and compliance activities.
 * Recommend improvements to security awareness initiatives based on metrics, emerging threats, and industry best practices.
 * Support Governance, Risk, and Compliance (GRC) initiatives as assigned.
 * Participate in cybersecurity program maturity and continuous improvement activities.
 * Collaborate with agency staff and stakeholders across the organization.
 * Perform other related duties as assigned.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Humanizing Your Documentation](https://www.wearedevelopers.com/videos/476-humanizing-your-documentation)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Why Is Software Documentation Still Static – And Why Modern Browsers Deserve Better](https://www.wearedevelopers.com/videos/2054-why-is-software-documentation-still-static-and-why-modern-browsers-deserve-better)
- [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)