Cyber Security Awareness & Phishing Program Lead

About the role

We are looking for an experienced Cyber Security Awareness & Phishing Program Lead to design, implement and manage a comprehensive phishing awareness strategy for a large organization of roughly 10,000 employees. Reporting to the Security Business Development Manager within the CSO organization, you will drive cultural change, improve employee resilience and measure the impact of awareness initiatives.

Key responsibilities

• Assess the current phishing awareness maturity and review existing analyses.
• Define a 12‑ to 24‑month phishing awareness strategy aligned with business objectives.
• Create and maintain a catalogue of phishing simulation campaigns with varied scenarios, difficulty levels and target audiences.
• Plan, configure, execute and analyse end‑to‑end phishing simulation campaigns.
• Develop multi‑channel internal communication plans in partnership with Cyber Security, Internal Communications and business units.
• Establish KPIs, maturity indicators, success metrics and reporting dashboards.
• Monitor progress, refine initiatives based on results and organizational needs.
• Provide knowledge transfer, coaching and long‑term ownership to internal teams.
• Act as a trusted advisor to stakeholders on awareness and behavioural change.

Required profile

• Proven experience in cyber security awareness, phishing simulation programs and security culture development.
• Strong knowledge of ISO 27001 and other information security frameworks.
• Hands‑on experience with Microsoft 365, especially Exchange Online.
• Demonstrated change‑management and user‑adoption expertise.
• Excellent analytical, communication and stakeholder‑management skills.
• Native or bilingual proficiency in Dutch or French (mandatory) and English (preferred).

Required skills

• Cyber Security
• Security Awareness & Phishing Programs
• Change Management
• Analytics & Reporting
• Microsoft 365
• Exchange Online
• ISO 27001