Phishing Campaign Specialist

What is the mission about?

This role is to plan, coordinate, execute and manage enterprise-wide phishing simulation campaigns across NATO entities to strengthen cybersecurity awareness, assess employee susceptibility to phishing attacks, and improve the organisation's overall human security posture.

Job Description

Role Overview

Nextlink is seeking an experienced Phishing Campaign Specialist to support the coordination, management and execution of enterprise-wide phishing simulation campaigns across NATO entities.

The successful candidate will play a key role in strengthening NATO's cybersecurity awareness and improving its overall human-risk management capabilities by designing realistic phishing simulations, managing campaign delivery, analysing results and providing actionable recommendations.

The role involves coordinating with multiple NATO entities, managing phishing simulation platforms, developing reusable phishing templates, monitoring emerging phishing and social engineering threats, and producing consolidated campaign reports for operational and management stakeholders.

The specialist will act as a central point of contact for phishing campaign services, ensuring consistency, quality, effectiveness and continuous improvement across participating NATO entities.

Key Responsibilities

A. Phishing Campaign Planning and Execution

• Plan, coordinate and execute phishing simulation campaigns across NATO entities.
  
• Define campaign objectives, target audiences, scenarios and execution schedules.
  
• Configure, test and validate campaigns before deployment.
  
• Monitor campaign execution and evaluate results against defined security awareness objectives.
  
• Recommend improvements based on campaign outcomes and organisational requirements.
  

B. Phishing Template Development and Management

• Develop, maintain and manage an approved library of reusable phishing simulation templates.
  
• Create realistic phishing scenarios based on current cyber threats and social engineering techniques.
  
• Adapt templates to different audiences, languages, organisational contexts and business environments.
  
• Support NATO entities in developing and customising their own phishing simulation templates.
  
• Ensure templates are reviewed, validated and maintained in accordance with agreed standards.
  

C. Threat Intelligence and Scenario Development

• Monitor emerging phishing, email-based attacks and social engineering techniques.
  
• Identify relevant cyber threat trends and translate them into realistic simulation scenarios.
  
• Recommend new campaign themes and scenarios aligned with current threat landscapes.
  
• Share threat insights, campaign findings and lessons learned with participating entities.
  

D. Phishing Simulation Platform Administration

• Administer the phishing simulation platform and manage user access, roles and permissions.
  
• Coordinate platform whitelisting activities across NATO entities.
  
• Liaise with the platform service provider to resolve technical issues and service requests.
  
• Track vendor support activities, platform changes and service updates.
  
• Communicate relevant platform updates and operational guidance to stakeholders.
  

E. License and Contract Management Support

• Monitor software licence usage and availability.
  
• Maintain records of contractual dates, licence allocations and renewal requirements.
  
• Identify opportunities to optimise licence utilisation.
  
• Coordinate renewal preparation and provide relevant information to designated commercial and procurement stakeholders.
  
• Support contract administration while leaving commercial and approval decisions with authorised organisational owners.
  

F. Reporting, Analytics and Performance Monitoring

• Prepare entity-level, consolidated and management-level phishing campaign reports.
  
• Analyse campaign performance using consistent metrics and reporting definitions.
  
• Identify trends, vulnerabilities, risk indicators and areas requiring improvement.
  
• Develop dashboards and performance indicators using Excel, Power BI or similar reporting tools.
  
• Provide actionable recommendations to improve cybersecurity awareness and reduce human-related security risks.
  

G. Stakeholder and Service Coordination

• Act as the primary point of contact for phishing campaign support across NATO entities.
  
• Provide guidance and campaign