Senior Social Engineering Specialist

ING; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Restaurant card

Flexible working at home/office

Pension plan

Transport allowance

Job summary

ING is seeking a Senior Social Engineering Simulation Specialist in Madrid to lead a global phishing simulation programme and strengthen resilience across the organisation. This hands-on role develops credible, threat-informed scenarios, operates simulation platforms and collaborates across privacy, legal, and regional teams to drive measurable improvements.

You will coordinate stakeholders, analyse behavioural data, and translate results into actionable insights for security awareness teams and

Qualifications

• 5+ years in cybersecurity, phishing simulation or social engineering testing.
• Hands-on experience managing phishing simulations at scale.
• Ability to translate threat intel into realistic, safe scenarios.

Responsibilities

• Plan, govern and improve a global social engineering simulation programme.
• own lifecycles of phishing campaigns, including scoping, targeting, QA and reporting.
• Co-create threat-informed scenarios and translate intelligence into simulations.
• Expand simulations beyond email to other channels with clear objectives and safeguards.
• Operate simulation platforms, ensure deliverability and protect data.
• Define metrics for behavioural resilience beyond click rates and report trends.
• Develop dashboards to highlight exposure and opportunities for improvement.
• Provide clear recommendations to security teams and CISOs.
• Coordinate with privacy, legal, compliance, HR, communications and local CISOs.
• Ensure legal, cultural and employee-relations considerations are accounted for.

Job description

At ING Hubs Spain we are looking for a Senior Social Engineering Simulation Specialist

We are looking for a talented and enthusiastic Senior Social Engineering Simulation Specialist to join our highly specialised and multicultural team within the Tribe Cyber Threat Management (CTM), part of the Global CISO Office.

Your role and work environment:

The responsibility of this team is to strengthen ING's resilience against current and emerging threats through a hands-on approach, and our way of working is based on global collaboration, responsible testing, knowledge sharing and the Orange Behaviours.

In this role, you will manage and execute ING's global social engineering simulation programme, including the global phishing simulation programme. Your mission will be to safely test and improve how employees, teams and business processes recognise, report and respond to social engineering threats.

This is not a traditional security awareness or communications role. We are looking for a hands-on specialist who can run a global programme, develop credible scenarios, operate simulation technology, coordinate stakeholders, analyse behavioural data and turn results into measurable improvements without creating a culture of blame.

Your key responsibilities:

• Manage the planning, governance, execution and continuous improvement of a risk-based global social engineering simulation programme, covering both global and targeted simulations.

• Own the full lifecycle of global and targeted phishing simulation campaigns, including scenario development, targeting, stakeholder coordination, technical preparation, quality assurance, scheduling, incident handling and reporting.

• Co-create realistic, threat-informed scenarios by translating relevant threat intelligence and observed attack patterns into safe and credible simulations.

• Develop, where appropriate, simulations across channels beyond email, such as telephone, messaging, collaboration tools, QR codes or physical approaches, with clear objectives, approvals, boundaries and safeguards.

• Operate and continuously improve simulation platforms and supporting infrastructure, including templates, sending domains, landing pages, reporting mechanisms, user targeting and data integrations.

• Ensure deliverability and technical performance, troubleshoot operational issues, and protect simulation systems and data from misuse.

• Define and analyse meaningful behavioural resilience metrics that go beyond click rates, including recognition, reporting and response behaviour.

• Identify trends across countries, business units, roles, channels and scenario types, and develop dashboards that highlight exposure and opportunities for improvement.

• Translate simulation outcomes into clear recommendations for security awareness teams, local CISOs, business leaders and control owners.

• Support targeted communications, learning activities, process changes, technical controls and follow-up simulations, assessing whether interventions improve resilience over time.

• Coordinate planning and approvals with privacy, legal, compliance, human resources, communications, technology and local CISO organisations.

• Ensure simulations account for local legal, labour, cultural, accessibility and employee-relations considerations, and present balanced and actionable insights to leadership.

What are we looking for?

Want to know if this job is made for you? These are some of the qualities that we value the most for this role.

• At least 5 years of relevant experience in cybersecurity, phishing simulation, social engineering testing, security awareness, threat-led testing or a comparable field.

• Demonstrable hands-on experience managing and executing phishing simulation campaigns at scale using enterprise phishing simulation or human-risk management platforms.

• Strong knowledge of social engineering techniques and email technologies, including sender authentication, mail routing, secure email gateways, URL protection, browser controls and reporting mechanisms.

• Experience translating threat intelligence into safe, realistic scenarios and analysing campaign data to produce meaningful risk insights and recommendations.

• Strong programme management and stakeholder engagement skills, with an understanding of the privacy, ethical, cultural and employee-relations considerations associated with simulations in a regulated, multinational environment.

• A strong sense of ownership, with the ability to manage multiple activities, resolve operational issues, coordinate dependencies and follow through from planning to measurable improvement.

• A collaborative and constructive approach focused on helping employees and teams become more resilient rather than assigning blame.

• A continuous-improvement mindset and the ability to stay ahead of the evolving social engineering threat landscape.

• Strong written and verbal communication skills and fluency in English.

• Experience with additional simulation channels, behavioural change, data analysis, automation or scripting is a plus.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you!

• Be flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

• Restaurant card. So that thinking about what to have for lunch doesn’t take up your time or your cravings.

• Our house will be your home. In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

• Health insurance. For you and all your family (spouse/partner and children).

• Life insurance. We help you protect what matters most to you.

• Flexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…

• Transport allowance. It doesn’t matter where you live, we’ll help you get to the office.

• Pension plan. You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech-first mindset:

We're not just a bank—we're a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.

We have global impact:

You'll be working on solutions that serve more than 34 million of customers in over 38 countries.

We are agile:

ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.

Sustainability at the heart of what we do:

We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We're proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.

We're looking for curious minds, bold builders, and passionate problem-solvers. If you're looking for a place to find new ways to drive efficiency and provide superior customer value , where your ideas matter, and where you can grow with purpose— we're looking forward to meeting you.

#LI-DNI