Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Cybersecurity Professional
Raleigh, NC · On-site
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
Cybersecurity Professional
Raleigh, NC · On-site
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
... g., Phishing email simulations). * Routinely publishes Governance, Risk, and Compliance (GRC ... Malware analysis. * Multi-task and manage demands of multiple projects, incidents, and tasks.
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Quick apply
Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals. * Monitor and analyze global regulatory developments ...
Security Operations Center - USC/GC
Cincinnati, OH · On-site
$35 - $37/hr
Analyze phishing emails and malware-related events. * Monitor endpoint security solutions. * Document investigations, findings, and response activities. * Work with senior analysts during incident ...
Security Operations Center - USC/GC
Cincinnati, OH · On-site
$35 - $37/hr
Analyze phishing emails and malware-related events. * Monitor endpoint security solutions. * Document investigations, findings, and response activities. * Work with senior analysts during incident ...
Investigate, categorize, and take action on reported phishing emails * Research vulnerabilities and exploits to determine applicability, adjust risk levels, and document findings * Analyze audit logs ...
Investigate, categorize, and take action on reported phishing emails * Research vulnerabilities and exploits to determine applicability, adjust risk levels, and document findings * Analyze audit logs ...
Senior Security Engineer Endpoint & Email Security
Charlotte, NC · On-site
$111K - $153K/yr
... phishing, malware delivery, and email-based attacks, including analysis of headers, payloads, URLs, and attachments Conduct technical investigations and post-incident digital forensics to identify ...
Senior Security Engineer Endpoint & Email Security
Charlotte, NC · On-site
$111K - $153K/yr
... phishing, malware delivery, and email-based attacks, including analysis of headers, payloads, URLs, and attachments Conduct technical investigations and post-incident digital forensics to identify ...
Phishing Email Analyst information
See salary details
$31K - $40K
11% of jobs
$40K - $49K
9% of jobs
$52.1K is the 25th percentile. Wages below this are outliers.
$49K - $58K
15% of jobs
$58K - $67K
15% of jobs
The median wage is $67.3K / yr.
$67K - $76K
18% of jobs
$82.5K is the 75th percentile. Wages above this are outliers.
$76K - $85K
11% of jobs
$85K - $94K
7% of jobs
$94K - $103K
5% of jobs
$103K - $112K
4% of jobs
$112K - $121K
2% of jobs
$121K - $130K
3% of jobs
$31K
$73.3K
$130K
How much do phishing email analyst jobs pay per year?
As of Aug 10, 2026, the average yearly pay for phishing email analyst in the United States is $73,261.00, according to ZipRecruiter salary data. Most workers in this role earn between $52,500.00 and $87,000.00 per year, depending on experience, location, and employer.
What is the difference between Phishing Email Analyst vs Security Analyst?
| Aspect | Phishing Email Analyst | Security Analyst |
|---|---|---|
| Credentials | Certifications like CompTIA Security+, CEH often preferred | Certifications like CISSP, Security+ common |
| Work Environment | Focus on email security, threat detection, and analysis | Broader security responsibilities including network, system, and data protection |
| Employer & Industry | Financial institutions, tech companies, cybersecurity firms | All industries, including finance, healthcare, government |
| Search & Comparison Intent | Understanding specific email threat roles | Broader cybersecurity roles and responsibilities |
The Phishing Email Analyst specializes in identifying and mitigating email-based threats, focusing on phishing attacks and email security. In contrast, a Security Analyst has a broader scope, covering various security domains beyond email. Both roles require similar certifications and are vital in protecting organizational assets, but their focus areas differ significantly.
What challenges do phishing email analysts face in identifying sophisticated phishing attempts?
Phishing Email Analysts often encounter challenges with increasingly sophisticated phishing campaigns that use advanced social engineering tactics and mimic legitimate communications. Attackers may employ tactics like domain spoofing, well-crafted language, and even personalized details to evade detection. Analysts must stay vigilant, continuously update their knowledge on emerging threats, and collaborate closely with IT security teams to refine detection protocols. Regular training and awareness of the latest phishing trends are essential to effectively differentiate between genuine and malicious emails.
What is a phishing email analyst?
Phishing Email Analysts are cybersecurity professionals who specialize in identifying, analyzing, and responding to phishing emails. Their primary role is to detect suspicious emails, investigate their origins and intent, and help protect organizations from email-based cyber threats. They often collaborate with IT and security teams to develop strategies and training programs that minimize the risk of phishing attacks. By analyzing trends and reporting incidents, they contribute to enhancing the overall security posture of a company.
What skills and qualifications are needed to be a phishing email analyst?
To thrive as a Phishing Email Analyst, you need strong analytical skills, knowledge of cybersecurity principles, and experience with threat detection—often supported by degrees in IT or cybersecurity and relevant certifications. Familiarity with email security gateways, SIEM tools, and phishing simulation platforms is typically required. Attention to detail, critical thinking, and effective communication are vital soft skills in this role. These competencies enable accurate identification and response to phishing threats, helping protect organizations from cyberattacks.
More about Phishing Email Analyst jobs
What cities are hiring for Phishing Email Analyst jobs? Cities with the most Phishing Email Analyst job openings:
What states have the most Phishing Email Analyst jobs? States with the most job openings for Phishing Email Analyst jobs include:
What job categories do people searching Phishing Email Analyst jobs look for? The top searched job categories for Phishing Email Analyst jobs are:
Contractor
Medical, Dental, Vision, Life, Retirement
Re-posted 24 days ago
Job description
Job Title: Governance Risk & Compliance Analyst Location: Lakewood, CO Work Model: Hybrid – onsite and remote Overview System One is seeking a GRC Analyst for an opportunity in Lakewood, CO. The GRC Analyst is a member of the Governance, Risk & Compliance function within the Global Information Security Office and supports the implementation of company?wide security governance, risk management, and compliance programs. Under the direction of the GRC Functional Leader, the analyst contributes to policy development, risk oversight, and continuous improvement of the organization’s security posture. The role also works closely with regional Information Security Officers (ISOs) and cross?functional teams to support the deployment of global standards and local regulatory requirements. Responsibilities
- Support information security risk assessments for new projects, systems, and business processes.
- Assist in conducting internal control reviews (e.g., J?SOX), preparing audit materials, and coordinating responses to internal and external auditors.
- Track and follow up on remediation actions to ensure timely closure of identified risks.
- Contribute to drafting, updating, and maintaining global information security policies, standards, and procedures.
- Review relevant laws, regulations, and industry frameworks (e.g., ISO 27001, NIS2) and incorporate stakeholder feedback into documentation.
- Support the rollout and implementation of policies across regions.
- Monitor adherence to security and regulatory requirements, including ISO 27001, NIS2, and GDPR.
- Collect and organize compliance evidence, track corrective actions, and support certification and regulatory readiness efforts such as ISO 27001/42001 and NIS2 programs.
- Conduct third party security risk assessments by distributing questionnaires, analyzing responses, verifying controls, and documenting results in the GRC tracking systems.
- Identify and escalate high risk findings to the GRC Functional Leader and support follow up mitigation activities.
- Participate in the planning and implementation of security awareness programs for all associates.
- Create e-learning materials and training materials, conduct phishing email exercises, and distribute disseminated content on internal portals.
- Monitor and analyze global regulatory developments related to cybersecurity with a focus on industrial control systems (ICS), IT environments, and critical infrastructure.
- Assist in evaluating how new or updated regulations (e.g., NIS2, FDA cybersecurity expectations, industrial cybersecurity standards, or country specific critical infrastructure laws) impact company operations.
- Track emerging obligations, document requirements, and support gap assessments to ensure timely compliance.
- Assist in the preparation, maintenance, and continuous improvement of the CISO Dashboard by collecting, validating, and analyzing security metrics across the Global GRC function.
- Compile key performance indicators (KPIs) and key risk indicators (KRIs) related to compliance status, audit findings, supplier risk, incident trends, training completion, regulatory readiness, and other relevant security domains.
- Support the visualization and communication of security posture to senior leadership by ensuring data accuracy, timely updates, and clarity in reporting.
- Support the development and enforcement of governance controls for the secure use of artificial intelligence technologies across the organization.
- Identify risks related to AI systems—such as model security, algorithmic integrity, and misuse—and contribute to risk assessments and mitigation plans.
- Help evaluate third party AI tools.
- Support the development and improvement of GRC processes, tools, and documentation to enhance operational efficiency and standardization.
- Assist in preparing reports, presentations, and materials for leadership reviews, steering committees, and cross functional meetings.
- Participate in internal security projects and initiatives, including process automation, metrics development, and enhancements to governance workflows.
- Provide coordination and administrative support for security committees, working groups, and regional GRC activities.
- Perform additional duties as assigned to support the Global Information Security Office and the broader GRC program.
- 3 to 5+ years of experience in information security, governance, risk management, compliance, IT audit, or a related discipline.
- Experience supporting security programs in global or regulated environments is a plus.
- Understanding of global and regional information security regulations (e.g., data protection laws, cybersecurity requirements) and familiarity with security frameworks such as ISO 27001.
- Knowledge of internal control frameworks (e.g., JSOX) and IT governance practices is highly desirable.
- Experience supporting audit activities is preferred.
- Experience with risk assessment methodologies, control evaluation, and vulnerability or issue management processes.
- Strong analytical and problem-solving skills, with the ability to identify risks, assess impacts, and support the development and tracking of corrective actions.
- Ability to communicate security requirements, policies, and audit findings clearly and persuasively with stakeholders across regions and business units.
- Strong coordination skills to build consensus and drive compliance.
- Industry certifications such as CISSP, CISA, CISM, ISO 27001 Lead Implementer/Auditor, or similar are preferred but not required.
- Bachelor’s degree in information security, Cybersecurity, Information Systems, Computer Science, or a related field; or equivalent professional experience.
- Familiarity with governance, risk, and compliance tools (e.g., BitSight, Drata, OneTrust, Archer, or similar) for managing risks, audits, and compliance workflows.
- Working knowledge of cybersecurity concepts such as identity and access management, endpoint protection, vulnerability management, cloud security, and secure system design.
- Experience supporting cross-functional security or compliance initiatives, including requirements gathering, documentation, and progress tracking.
- Ability to interpret risk metrics, compliance data, and audit results.
- Experience with dashboards, KPI/KRI reporting, or data visualization tools is a plus.
- Awareness of emerging cybersecurity regulations (e.g., NIS2, AI governance frameworks, critical infrastructure rules) and their potential impact on enterprise operations.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. #M-1 #LI-SG1 Ref: #558-Scientific