Pen Testing Manager - Applications

Job description:

WHAT TO EXPECT

We are looking for a Pen Testing Manager to cover the Jaguar Land Rover application portfolio (on prem and cloud), you will be expected to take a lead in the development of our application testing processes in both traditional and DevSecOps environments, utilising resources from outsourced partners and suppliers.

As a Pen Testing Applications Manager, you will be responsible for working with Jaguar Land Rover project teams and application owners to gain an understanding of the systems architecture and scope appropriate pen tests. You will also work with Jaguar Land Rover approved partners to organise and coordinate testing, and upon completion be able to review results and advise on steps to remediate.

You will represent the department in wider business discussions around application remediation and show clear traceability on remediation through standards, process definition and technical documentation.

Key Accountabilities and Responsibilities

* Act as a channel to enable project teams and application owners to consult with preferred penetration test suppliers
* Reviewing and agreeing to penetration test scopes
* Review of penetration test results and inform SOC and CISO of any high/critical risks identified via the risk governance board
* Collect, analyse, and prepare reports required for senior management, regulators, and other relevant stakeholders
* Periodically review penetration test process to ensure relevance and cost-effectiveness to the wider business
* Work with Management to ensure information security risk findings are reviewed and solutions are implemented, and risks are properly managed
* Lead the escalation and resolution of risk and compliance issues with appropriate stakeholders
* Supporting any other identified security testing requirements
* Monitor and measure company compliance with its security penetration policies and procedures as well as worldwide standards and laws to ensure organizational compliance
* Manage test and remediation budgets in line with financial processes
* Undertake any other work as directed by their line manager in connection with their job as may be requested


WHAT YOU'LL NEED

* An individual who can apply analytical rigour to develop and drive well-thought-out operational plans, collaborate across functions and combine a short-term, pragmatic focus with a strategic vision
* A determined individual, highly driven, committed and results-orientated who works with pace, energy, and confidence
* An individual who can demonstrate good capability in leadership and management skills, who can motivate, develop, and lead functional and cross-functional teams
* An individual who is resilient, energetic, and enthusiastic, responds constructively to innovative ideas and input in a changing business environment
* An individual who is comfortable challenging all stakeholders with strong influencing and engagement skills


Knowledge, Skills and Experience

* Previous significant experience in specifying penetration tests and acting on results
* Understanding of systems engineering principles, and requirements development
* Qualified to degree level in a relevant discipline, or equivalent experience
* Excellent written and verbal communication skills; ability to confer complex technical and procedural topics in a clear and concise form, confidently presenting to stakeholders
* Experience leading technical specialists from outsourced partners and suppliers