Assistant Vice President, Pen Test Coordinator

Job Information:

• Functional Title: Pen Test Coordinator
• Department: IT Security
• Corporate Level: Assistant Vice President
• Reports To: Director of Pen Testing
• Location: London

Overview of the role: 

The Pen Test Coordinator is responsible for ensuring that penetration tests are executed efficiently, monitoring remediation activities, and reporting on the state of testing and findings to senior management.  Working with multiple external penetration test vendors and internal security and technical staff, they ensure that all test pre-requisites are in place, including access authorizations, and the onboarding of external testers into the CLS network.  In addition, unremediated findings are tracked and monitored, and the state of testing and findings are reported on a regular basis to various security committees and to the board.  This role forms a vital part of managing and delivering the CLS pen test program, working closely with the Director of Pen Testing to execute existing test requirements and to further develop the CLS pen testing capability.

What you will be doing: 

• Managing day to day relationships with Pen Test Vendors:
  • Act as the primary interface between external pen test vendors and CLS.
  • Ensure vendor pen test rig images are obtained and updated as needed.
• Support the coordination and execution of Penetration Testing engagements:
  • Facilitate meetings between CLS and pen test vendors to agree scope, engagement dates and as the main point of contact during testing,
  • Ensure access requirements for the test are authorized, actioned and removed after the test,
  • Onboard and offboard external pen testers to CLS,
  • Ensure any blocking issues are resolved or escalated if necessary.
• Findings management:
  • Documenting pen test findings and observations,
  • Tracking the remediation progress of findings,
  • Obtaining suitable evidence of remediation to support closure.
• Escalation management:
  • Assemble data on SLA breaches and present to the escalation forum,
  • Follow up on escalation actions to ensure remediation stays on track.
• Metrics production:
  • Produce accurate and timely metrics on penetration testing to support governance, regulatory and audit enquiries.
• Support the ongoing management and development of pen testing at CLS:
  • Participate in market research into new vendors and pen testing capabilities, and subsequent roll out into production use.
  • Production and maintenance of run books,
  • Enhancement of pen testing infrastructure, standards and procedures.

What we are looking for: 

• Experience in IT security (3-5 years), including 1-2 years coordinating security assessments or vulnerability remediation,
• Production of metrics and reports on vulnerability management,
• Strong stakeholder management across security, vendors and technical teams,
• Operating within regulated environments, adhering to established policies and procedures.

Professional qualifications / certifications:

• Bachelor’s degree or equivalent professional experience.
• Professional security certifications such as CISM, CISSP, Security+, CRISC or equivalent is desirable but not essential.