Phishing Campaign Specialist

h3Duties /h3ulliCoordinate phishing simulation campaigns across multiple entities, acting as the primary service contact and providing advice and campaign support tailored to organisational needs. /liliPlan and execute phishing campaigns by defining objectives, target audiences, scenarios and schedules in line with security awareness objectives. /liliConfigure, test, validate, execute and review phishing simulations to ensure campaign accuracy and effectiveness. /liliCreate, maintain and manage an approved library of reusable phishing templates, supporting entity-developed templates and adapting scenarios to different audiences, languages and business contexts. /liliMonitor phishing and social engineering trends to develop realistic simulation scenarios and share relevant threat insights and lessons learned. /liliAdminister phishing simulation platforms, including user access, role management and platform whitelisting across NATO entities. /liliCoordinate with platform providers and vendors, tracking service requests, technical issues and platform updates. /liliMonitor software licence usage, contractual dates and renewal requirements, identifying opportunities to optimise licence utilisation and supporting timely renewal preparations. /liliProduce entity-level, consolidated and management reports using consistent metrics and definitions to analyse campaign performance, trends and risk indicators. /liliDevelop recommendations and follow-up actions based on campaign results to improve security awareness and reduce human-related cybersecurity risks. /liliMaintain campaign documentation, procedures, standards and deliverables in agreed repositories and formats. /liliEnsure campaign activities comply with applicable organisational policies, privacy requirements and governance processes. /liliIdentify opportunities to improve phishing campaign effectiveness, platform administration and overall service delivery. /liliCoordinate with technical and non-technical stakeholders across multiple entities, managing competing priorities and deadlines. /liliSupport the development of dashboards, key performance indicators (KPIs) and awareness metrics to monitor campaign outcomes. /li /ulh3Requirements /h3h3Essential /h3ulliExperience managing or supporting enterprise phishing simulation campaigns and using phishing simulation and security awareness platforms. /liliStrong understanding of phishing and social engineering techniques, email technologies and relevant security controls. /liliAbility to design realistic phishing scenarios and templates, with strong attention to detail in campaign configuration, testing and validation. /liliStrong analytical skills, including the ability to consolidate and standardise results across multiple entities and produce clear operational and management reports. /liliEffective stakeholder management and vendor coordination skills, with the ability to work with both technical and non-technical teams. /liliStrong organisational skills and the ability to manage multiple entities, campaigns, priorities and deadlines. /liliExcellent written and verbal English communication skills. /liliAbility to work independently, take initiative and proactively identify and address issues. /li /ulh3Desirable /h3ulliExperience delivering phishing simulations, security awareness and human-risk management programmes across large, federated, multinational or multi-entity organisations. /liliKnowledge of threat intelligence, current phishing trends, mail security gateways and related email security environments. /liliExperience developing dashboards, KPIs and security awareness metrics using Excel, Power BI or similar tools. /liliExperience with automation, scripting, APIs or platform integrations. /liliUnderstanding of privacy, data protection and employee-related considerations in security awareness programmes. /liliExperience with procurement, contract management or software licensing. /liliRelevant cybersecurity certifications or professional qualifications. /li /ulh3Education and Experience /h3pCandidates must meet one of the following criteria: /pulliA minimum of a Bachelor's degree from a nationally recognised or certified university in a related discipline, plus at least 3 years of post-related experience; or /liliExceptionally, candidates without a university degree may qualify through demonstrated abilities or relevant experience of interest to NCIA, with at least 10 years of extensive and progressive expertise in duties related to the Statement of Work /li /ul