Phishing Campaign Specialist

NCIM; Henegouwen; On-site; EUR 65,000 - 95,000; Full time

Job summary

NCIM is seeking a security awareness professional to coordinate and execute phishing simulation campaigns across multiple entities. The role includes planning scenarios, testing templates, and managing platforms with emphasis on governance and risk reduction.

You will develop insights and dashboards to track campaign outcomes and improve organizational resilience. The candidate will design and maintain phishing templates, monitor trends, and work with technical and non-technical stakeholders to

Qualifications

• Experience managing enterprise phishing campaigns.
• Strong understanding of phishing techniques and email security controls.
• Ability to design realistic phishing scenarios and templates.
• Strong analytics to consolidate results across entities and produce clear reports.
• Excellent written and verbal English communication skills.

Responsibilities

• Coordinate phishing simulation campaigns across entities and act as primary service contact.
• Plan and execute campaigns with defined objectives, audiences, scenarios and schedules.
• Configure, test, validate and review phishing simulations for accuracy and effectiveness.
• Maintain a library of reusable phishing templates and adapt scenarios for audiences.

Skills

Phishing campaigns

Security awareness

Stakeholder management

English communication

Data analysis

Education

Bachelor's degree

Extensive experience (10+ years)

Tools

Excel

Power BI

Phishing platforms

Automation scripting

Job description

Duties

• Coordinate phishing simulation campaigns across multiple entities, acting as the primary service contact and providing advice and campaign support tailored to organisational needs.
• Plan and execute phishing campaigns by defining objectives, target audiences, scenarios and schedules in line with security awareness objectives.
• Configure, test, validate, execute and review phishing simulations to ensure campaign accuracy and effectiveness.
• Create, maintain and manage an approved library of reusable phishing templates, supporting entity-developed templates and adapting scenarios to different audiences, languages and business contexts.
• Monitor phishing and social engineering trends to develop realistic simulation scenarios and share relevant threat insights and lessons learned.
• Administer phishing simulation platforms, including user access, role management and platform whitelisting across NATO entities.
• Coordinate with platform providers and vendors, tracking service requests, technical issues and platform updates.
• Monitor software licence usage, contractual dates and renewal requirements, identifying opportunities to optimise licence utilisation and supporting timely renewal preparations.
• Produce entity-level, consolidated and management reports using consistent metrics and definitions to analyse campaign performance, trends and risk indicators.
• Develop recommendations and follow-up actions based on campaign results to improve security awareness and reduce human-related cybersecurity risks.
• Maintain campaign documentation, procedures, standards and deliverables in agreed repositories and formats.
• Ensure campaign activities comply with applicable organisational policies, privacy requirements and governance processes.
• Identify opportunities to improve phishing campaign effectiveness, platform administration and overall service delivery.
• Coordinate with technical and non-technical stakeholders across multiple entities, managing competing priorities and deadlines.
• Support the development of dashboards, key performance indicators (KPIs) and awareness metrics to monitor campaign outcomes.

Requirements

Essential

• Experience managing or supporting enterprise phishing simulation campaigns and using phishing simulation and security awareness platforms.
• Strong understanding of phishing and social engineering techniques, email technologies and relevant security controls.
• Ability to design realistic phishing scenarios and templates, with strong attention to detail in campaign configuration, testing and validation.
• Strong analytical skills, including the ability to consolidate and standardise results across multiple entities and produce clear operational and management reports.
• Effective stakeholder management and vendor coordination skills, with the ability to work with both technical and non-technical teams.
• Strong organisational skills and the ability to manage multiple entities, campaigns, priorities and deadlines.
• Excellent written and verbal English communication skills.
• Ability to work independently, take initiative and proactively identify and address issues.

Desirable

• Experience delivering phishing simulations, security awareness and human-risk management programmes across large, federated, multinational or multi-entity organisations.
• Knowledge of threat intelligence, current phishing trends, mail security gateways and related email security environments.
• Experience developing dashboards, KPIs and security awareness metrics using Excel, Power BI or similar tools.
• Experience with automation, scripting, APIs or platform integrations.
• Understanding of privacy, data protection and employee-related considerations in security awareness programmes.
• Experience with procurement, contract management or software licensing.
• Relevant cybersecurity certifications or professional qualifications.

Education and Experience

Candidates must meet one of the following criteria:

• A minimum of a Bachelor's degree from a nationally recognised or certified university in a related discipline, plus at least 3 years of post-related experience; or
• Exceptionally, candidates without a university degree may qualify through demonstrated abilities or relevant experience of interest to NCIA, with at least 10 years of extensive and progressive expertise in duties related to the Statement of Work