Cybersecurity Awareness and Social Engineering Program Lead

Northern Trust • Chicago, IL

10d • $114,700 - $194,900

About The Position

The Cybersecurity Awareness and Social Engineering Program Lead sits within the Office of the CISO and leads Northern Trust’s enterprise phishing and social engineering simulation program while supporting role-based cybersecurity education. The role combines cybersecurity expertise, technology, data, and education to create realistic simulations, assess behavioral risk, and help employees develop stronger security habits.

The position leads program strategy and execution, manages simulation platforms, analyzes behavioral trends, develops dashboards and leadership reporting, and creates targeted education for employee populations. It partners with cybersecurity, technology, risk, compliance, communications, and business teams to coordinate campaigns and improve secure behaviors. The program is expected to evolve in response to emerging threats, technology, data, and employee behavior.

Northern Trust describes its culture as flexible and collaborative, with opportunities for internal movement, accessible senior leaders, an inclusive workplace, and a commitment to serving communities. Applicants must be authorized to work in the United States without current or future employment-based visa sponsorship.

Requirements

• Cybersecurity experience with a strong understanding of phishing, social engineering, business email compromise, credential theft, smishing, and vishing.
• Hands-on experience with enterprise phishing simulation or security awareness platforms such as KnowBe4 or Proofpoint.
• Experience designing and managing end-to-end phishing or social engineering campaigns.
• Strong analytical skills and experience turning campaign data into meaningful insights and recommendations.
• Ability to translate complex cybersecurity risks into clear, practical education and communications.
• Strong project management and stakeholder management skills.
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

Nice To Haves

• Experience in a large, global, regulated, or financial services environment.
• Experience with threat intelligence, security operations, email security, identity, incident response, or fraud teams.
• Experience developing cybersecurity training for higher-risk audiences such as executives, privileged users, technology teams, or customer-facing employees.
• Familiarity with learning management systems, BI/reporting tools, and automation.
• Relevant cybersecurity, risk, data, learning, or project management certifications.

Responsibilities

• Lead the strategy and execution of enterprise phishing and social engineering simulations, including email, smishing, and vishing campaigns.
• Design realistic, risk-based scenarios informed by emerging threats, attack trends, and internal risk themes.
• Manage simulation platforms such as KnowBe4, Proofpoint, or similar technologies, including campaign setup, testing, integrations, and optimization.
• Analyze campaign results and behavioral trends to identify higher-risk populations and opportunities for targeted education.
• Develop dashboards and leadership reporting on reporting rates, susceptibility, repeat behavior, and improvement over time.
• Create targeted cybersecurity education and role-based training for different employee populations.
• Partner with cybersecurity, technology, risk, compliance, communications, and business teams to coordinate campaigns and improve secure behaviors.
• Continuously evolve the program based on new threats, technology, data, and employee behavior.

Benefits

• Retirement benefits, including a 401(k) and pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts, and disability benefits.
• Paid time off.
• Parental and caregiver leave.
• Life and accident insurance.
• Other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed