Phishing Campaign Specialist

Duties

• Coordinate phishing simulation campaigns across multiple entities, acting as the primary service contact and providing advice and campaign support tailored to organisational needs.

• Plan and execute phishing campaigns by defining objectives, target audiences, scenarios and schedules in line with security awareness objectives.

• Configure, test, validate, execute and review phishing simulations to ensure campaign accuracy and effectiveness.

• Create, maintain and manage an approved library of reusable phishing templates, supporting entity-developed templates and adapting scenarios to different audiences, languages and business contexts.

• Monitor phishing and social engineering trends to develop realistic simulation scenarios and share relevant threat insights and lessons learned.

• Administer phishing simulation platforms, including user access, role management and platform whitelisting across NATO entities.

• Coordinate with platform providers and vendors, tracking service requests, technical issues and platform updates.

• Monitor software licence usage, contractual dates and renewal requirements, identifying opportunities to optimise licence utilisation and supporting timely renewal preparations.

• Produce entity-level, consolidated and management reports using consistent metrics and definitions to analyse campaign performance, trends and risk indicators.

• Develop recommendations and follow-up actions based on campaign results to improve security awareness and reduce human-related cybersecurity risks.

• Maintain campaign documentation, procedures, standards and deliverables in agreed repositories and formats.

• Ensure campaign activities comply with applicable organisational policies, privacy requirements and governance processes.

• Identify opportunities to improve phishing campaign effectiveness, platform administration and overall service delivery.

• Coordinate with technical and non-technical stakeholders across multiple entities, managing competing priorities and deadlines.

• Support the development of dashboards, key performance indicators (KPIs) and awareness metrics to monitor campaign outcomes.

Requirements

Essential

• Experience managing or supporting enterprise phishing simulation campaigns and using phishing simulation and security awareness platforms.

• Strong understanding of phishing and social engineering techniques, email technologies and relevant security controls.

• Ability to design realistic phishing scenarios and templates, with strong attention to detail in campaign configuration, testing and validation.

• Strong analytical skills, including the ability to consolidate and standardise results across multiple entities and produce clear operational and management reports.

• Effective stakeholder management and vendor coordination skills, with the ability to work with both technical and non-technical teams.

• Strong organisational skills and the ability to manage multiple entities, campaigns, priorities and deadlines.

• Excellent written and verbal English communication skills.

• Ability to work independently, take initiative and proactively identify and address issues.

Desirable

• Experience delivering phishing simulations, security awareness and human-risk management programmes across large, federated, multinational or multi-entity organisations.

• Knowledge of threat intelligence, current phishing trends, mail security gateways and related email security environments.

• Experience developing dashboards, KPIs and security awareness metrics using Excel, Power BI or similar tools.

• Experience with automation, scripting, APIs or platform integrations.

• Understanding of privacy, data protection and employee-related considerations in security awareness programmes.

• Experience with procurement, contract management or software licensing.

• Relevant cybersecurity certifications or professional qualifications.

Education and Experience

Candidates must meet one of the following criteria:

• A minimum of a Bachelor's degree from a nationally recognised or certified university in a related discipline, plus at least 3 years of post-related experience; or

… lees de volledige omschrijving bij NCIM Groep.