Campaign Specialist

Phishing Campaign Specialist – Cybersecurity Awareness Work Arrangement: Primarily on-site (up to 20% remote working, subject to approval) Security Clearance: Mandatory About the Opportunity Are you passionate about cybersecurity, social engineering and helping organisations stay one step ahead of evolving cyber threats? NextLink is looking for an experienced Phishing Campaign Specialist to support an exciting cybersecurity initiative within a major international defence environment. In this role, you will play a central part in strengthening cybersecurity awareness and reducing human-related security risks across multiple entities. You will have the opportunity to take ownership of enterprise-wide phishing simulation campaigns, develop realistic attack scenarios, work with cybersecurity awareness platforms, and turn campaign data into meaningful security insights. This is more than a campaign administration role. You will contribute to shaping how organisations understand, identify and respond to phishing threats, working closely with cybersecurity professionals, technical teams and stakeholders across an international environment. If you enjoy combining cybersecurity knowledge, analytical thinking, stakeholder engagement and service coordination, this is an opportunity to make a tangible impact. What You'll Be Doing 1. Lead Phishing Simulation Campaigns
• Plan, coordinate and execute phishing simulation campaigns across multiple entities.
• Develop campaign strategies, objectives, target audiences and realistic scenarios.
• Configure, test and monitor campaigns, ensuring successful and timely delivery.
• Analyse campaign outcomes and identify opportunities to strengthen security awareness. 2. Create Realistic Phishing Scenarios
• Build and maintain a reusable library of phishing simulation email templates.
• Develop realistic scenarios inspired by emerging phishing attacks and social engineering techniques.
• Adapt templates to different audiences, languages and organisational environments.
• Collaborate with participating entities to improve and customise campaign content. 3. Stay Ahead of Emerging Cyber Threats
• Monitor phishing trends, email-based attacks and evolving social engineering techniques.
• Translate threat intelligence into relevant and realistic simulation scenarios.
• Share insights, lessons learned and recommendations with participating organisations. 4. Manage Cybersecurity Awareness Platforms
• Administer phishing simulation platforms, including user access, roles and permissions.
• Coordinate email whitelisting activities across participating entities.
• Work with external platform providers to resolve technical issues and manage service requests.
• Monitor platform updates and communicate operational guidance to stakeholders. 5. Turn Campaign Data into Actionable Insights
• Prepare campaign performance reports at entity and consolidated levels.
• Analyse campaign metrics, identify trends and highlight areas requiring improvement.
• Develop dashboards, KPIs and management reports using Excel, Power BI or similar tools.
• Present actionable recommendations to improve cybersecurity awareness and reduce human-related risks. 6. Coordinate Stakeholders and Service Delivery
• Act as a central point of contact for phishing campaign services.
• Collaborate with cybersecurity teams, technical specialists and business stakeholders.
• Coordinate multiple campaigns, requests and priorities across different organisations.
• Maintain operational documentation, procedures and service improvement initiatives.
• Support software licence tracking, renewals and vendor coordination. What We're Looking For Essential Experience
• Demonstrable experience managing or supporting enterprise-level phishing simulation campaigns.
• Hands-on experience with phishing simulation or cybersecurity awareness platforms.
• Strong understanding of phishing attacks, email security and social engineering techniques.
• Knowledge of enterprise email technologies and security controls.
• Experience designing phishing scenarios, email templates and campaign strategies.
• Ability to configure, test, execute and monitor phishing campaigns.
• Strong analytical skills and experience preparing campaign reports and performance metrics.
• Experience coordinating stakeholders and working with external service providers.
• Excellent written and spoken English.
• Strong organisational skills, initiative and the ability to manage competing priorities independently. Desirable Experience
• Experience delivering cybersecurity awareness programmes in large, multinational or complex organisations.
• Knowledge of cyber threat intelligence and emerging phishing techniques.
• Familiarity with email security gateways and enterprise email environments.
• Experience with Power BI, Excel, dashboards and KPI reporting.
• Knowledge of scripting, automation, APIs and platform integrations.
• Understanding of privacy, data protection and governance requirements.
• Exposure to software licensing, procurement or contract administration.
• Relevant cybersecurity certifications or professional qualifications. Education & Professional Experience Candidates must meet one of the following criteria: Standard Route
• Bachelor's degree from a recognised/accredited university in a relevant discipline.
• Minimum 3 years of relevant professional experience. Exceptional Equivalency Route
• Candidates without a university degree may be considered with substantial relevant expertise and demonstrated capabilities.
• Minimum 10 years of progressive professional experience in related duties. What Makes This Opportunity Interesting?
• International cybersecurity environment: Contribute to cybersecurity awareness initiatives supporting multiple entities.
• End-to-end campaign ownership: Take responsibility for planning, executing, analysing and improving phishing simulation campaigns.
• Work with relevant technologies: Gain hands-on exposure to phishing simulation platforms, enterprise email security environments, Excel, Power BI and automation capabilities.
• Threat intelligence exposure: Translate real-world cyber threats into practical security awareness exercises.
• International collaboration: Work with cybersecurity professionals, technical teams and stakeholders across different organisations.
• Professional development: Further strengthen your expertise in cybersecurity awareness, human-risk management, threat analysis and security service delivery. Security Requirements This position requires eligibility to obtain and maintain the appropriate level of security clearance, in accordance with the applicable organisational and national security requirements. Candidates with existing government, defence or international security clearances are encouraged to apply.