dual ssid one secured and one unsecured on same ap

We are running Cisco LWAPP system here at my work and we run cisco AP’s and currently have WPA2 as our security with radius authenitcation. Our helpdesk has complained that it is to difficult to configure the wireless to get it running so they want to roll it back to open encryption to make it easier. one thought is to allow one section of our workers on a secured wireless SSID (WPA) and the rest on an unsecured SSID (open encryption) all running from the same controller. my question is would a hacker be able to get the data off the secured wireless because of the unsecured SSID is running from the same AP?