Cybersecurity Awareness and Social Engineering Program Lead

Northern Trust • Chicago, IL

9d • $114,700 - $194,900 • Hybrid

About The Position

Northern Trust is seeking a Cybersecurity Awareness and Social Engineering Program Lead within the Office of the CISO. The role strengthens the organization’s approach to identifying and responding to human cyber risk by leading enterprise phishing and social engineering simulations and supporting role-based cybersecurity education. It combines cybersecurity expertise, technology, data, and education to create realistic simulations, understand behavioral risk, and help employees develop stronger security habits.

The position leads the strategy and execution of simulation campaigns across email, smishing, and vishing. It designs risk-based scenarios informed by emerging threats, attack trends, and internal risk themes; manages simulation platforms; analyzes behavioral results; and creates dashboards and leadership reporting. The role also develops targeted education and role-based training, partners with teams across the organization, and continuously evolves the program in response to threats, technology, data, and employee behavior.

Requirements

• Cybersecurity experience with a strong understanding of phishing, social engineering, business email compromise, credential theft, smishing, and vishing.
• Hands-on experience with enterprise phishing simulation or security awareness platforms such as KnowBe4 or Proofpoint.
• Experience designing and managing end-to-end phishing or social engineering campaigns.
• Strong analytical skills and experience turning campaign data into meaningful insights and recommendations.
• Ability to translate complex cybersecurity risks into clear, practical education and communications.
• Strong project management and stakeholder management skills.

Nice To Haves

• Experience in a large, global, regulated, or financial services environment.
• Experience with threat intelligence, security operations, email security, identity, incident response, or fraud teams.
• Experience developing cybersecurity training for higher-risk audiences such as executives, privileged users, technology teams, or customer-facing employees.
• Familiarity with learning management systems, BI/reporting tools, and automation.
• Relevant cybersecurity, risk, data, learning, or project management certifications.

Responsibilities

• Lead the strategy and execution of enterprise phishing and social engineering simulations, including email, smishing, and vishing campaigns.
• Design realistic, risk-based scenarios informed by emerging threats, attack trends, and internal risk themes.
• Manage simulation platforms such as KnowBe4, Proofpoint, or similar technologies, including campaign setup, testing, integrations, and optimization.
• Analyze results and behavioral trends to identify higher-risk populations and opportunities for targeted education.
• Develop dashboards and leadership reporting covering reporting rates, susceptibility, repeat behavior, and improvement over time.
• Create targeted cybersecurity education and role-based training for different employee populations.
• Partner across cybersecurity, technology, risk, compliance, communications, and the business to coordinate campaigns and improve secure behaviors.
• Continuously evolve the program based on new threats, technology, data, and employee behavior.

Benefits

• Retirement benefits, including 401(k) and pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts, and disability benefits.
• Paid time off.
• Parental and caregiver leave.
• Life and accident insurance.
• Other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed