What should an employee do after clicking a phishing link?

Report it immediately and stop using the suspicious page. If a password was entered, change it from a trusted device and revoke active sessions; if a file was downloaded, have the device checked. Fast reporting gives the response team more time to limit damage.