Phishing Simulation Program Lead at MUFG managing enterprise-wide training and campaigns to combat email threats while ensuring organizational security readiness.
Responsibilities
Lead all aspects of the phishing simulation program, including campaign development, operational workflows, analytics, and reporting.
Design and launch sophisticated simulations (phishing, smishing, quishing, deepfakes, spear-phishing, whaling, social engineering) using tools such as ProofPoint ZenGuide, Adaptive Security, KnowBe4, and Cofense PhishMe.
Conduct research on current threats and attack techniques, including those driven by generative AI, to ensure simulations reflect the latest risks.
Develop and deliver training materials and sessions to educate enterprise users on detection and risk/threat prevention related to email exploitation.
Analyze simulation results, manage reporting metrics (including 1x/2x/3x clickers), and provide actionable insights to stakeholders.
Work closely with other security teams to integrate simulation results into broader security awareness and data protection initiatives.
Continuously refine simulation strategies and techniques based on feedback, analytics, and evolving threat landscapes.
Requirements
3-5 years’ experience supporting a security awareness program, including phishing simulations.
2+ years’ experience in Financial Services or Banking, with a focus on information technology and information security (preferred).
Strong technical skills in campaign development, threat analysis, and security research.
Proficient in data analytics and Microsoft platforms.
Prior project or program management experience; ability to manage multiple activities simultaneously and influence indirect resources to achieve required outcomes.
Self-starter with the ability to coordinate activities across a global organization; able to work independently and as part of a team.
Excellent written and verbal communication skills.
Certification in information security or data privacy protection (e.g., Security+, CISSP) is a plus.
Benefits
Comprehensive health and wellness benefits
Retirement plans
Educational assistance and training programs
Income replacement for qualified employees with disabilities
Technical Recruiter for BGS managing recruitment of Cybersecurity and IT professionals. Collaborating with technical teams to identify skill requirements and enhance talent acquisition processes.
Security and Privacy SME at Dynanet Corporation responsible for data management compliance and governance guardrails. Ensuring secure data handling and adherence to federal regulations.
PAM Manager responsible for strategy, roadmap, and operations of PAM program at Intact. Leading a team to safeguard privileged identities and secrets across various environments.
Senior Cybersecurity Vulnerability Management Versatilist at Boeing. Protecting the IT ecosystem by innovating vulnerability management solutions and leading security initiatives.
Entry level Associate Security Engineer at Navy Federal securing technical infrastructure and workloads with operational capabilities and threat monitoring practices.
Machine Learning Researcher focusing on innovative AI and intelligent automation for cybersecurity. Driving research in Agentic AI and collaborating with cross - functional teams for production - grade features.
EHS - Management expert overseeing environmental, health, and safety compliance at ZF. Collaborating with teams to foster a safe work culture and manage regulatory compliance.
Senior Technical Lead architecting and securing multi - cloud environments for Celestica. Leading cloud security projects focusing on Google Cloud, Azure, and Google Workspace.
Senior Technical Lead responsible for architecting and implementing global network security solutions. Collaborating with internal and external teams to meet cybersecurity requirements for Celestica.
Cybersecurity Lead - Product Security at Celestica securing network hardware and operating systems. Lead the 'Secure by Design' principles and operationalize standardized SDLC within product engineering teams.