[6464] Phishing Campaign Specialist

Start date: Negotiable
Clearance Required: NATO Secret
Location: Mons, Belgium

Requirements
• Active NATO SECRET security clearance.
• Bachelor's degree from a nationally recognised/certified university in a related discipline, with at least 3 years of post-related experience; or, exceptionally, at least 10 years of extensive and progressive relevant experience in lieu of a degree.
• Experience managing or supporting enterprise phishing simulation campaigns and using phishing simulation and security awareness platforms.
• Strong understanding of phishing and social engineering techniques, email technologies and relevant security controls.
• Ability to design realistic scenarios and templates, with attention to detail in campaign configuration and validation.
• Strong analytical skills, including consolidating and normalising results across entities and producing operational and management reports.
• Effective stakeholder management and vendor coordination, working with technical and non-technical teams.
• Strong organisational skills to manage multiple entities, campaigns, priorities and deadlines.
• Strong written and verbal English communication skills, with the ability to work independently and proactively identify issues.

Desirable Experience and Qualifications:
• Experience delivering phishing simulation, security awareness and human-risk management programmes across large, federated, multinational or multi-entity organisations.
• Knowledge of threat intelligence, current phishing trends, mail security gateways and related email security environments.
• Experience developing dashboards, KPIs and awareness metrics using Excel, Power BI or similar tools.
• Experience with automation, scripting, APIs or platform integrations.
• Understanding of privacy, data protection and employee considerations.
• Experience with procurement, contract management or software licensing.
• Relevant cybersecurity certifications or professional qualifications.

Duties and Role
• Act as the primary service contact for supported entities, providing advice and campaign support according to their needs.
• Coordinate stakeholders and promote consistent practices and knowledge sharing.
• Plan and execute phishing campaigns by defining objectives, audiences, scenarios and schedules.
• Configure, test, validate, execute and review campaigns in line with organisational awareness objectives.
• Create and maintain an approved, reusable phishing template library.
• Support entity-developed templates and adapt scenarios for different audiences, languages and business contexts.
• Monitor phishing and social engineering trends, recommend realistic simulation scenarios, and share threat insights and lessons learned.
• Administer the phishing simulation platform, including managing user access and roles.
• Support platform whitelisting across NATO entities.
• Track vendor issues and service requests, and communicate relevant platform changes.
• Track licence usage, contractual dates and renewal requirements, identify optimisation opportunities, and coordinate timely renewal preparation.
• Produce entity-level, consolidated and management reports using consistent metrics and definitions.
• Analyse campaign results, trends and risk indicators, and recommend follow-up actions.
• Maintain procedures, standards and deliverables in agreed repositories and formats.
• Follow applicable policies, privacy requirements and governance processes.
• Recommend improvements to campaign effectiveness and service delivery.

Specific Working Conditions
• Remote workers must provide their own IT equipment for processing public and unclassified information, including Microsoft-based video collaboration tools.
• Remote work from another NATO nation may be permitted for up to 20% of total working time, subject to prior approval from the Resource Manager and Section Head of AE.
• Homeworking within the duty location is subject to NCIA's teleworking policy and coordination with the Section Head of AE.
• Travel to NCIA locations in Belgium may be required for in-person or departmental meetings.
• Eligible travel costs are reimbursed under NATO regulations. Work-related travel requests must originate from the designated duty station.