Penetration Testing Manager (Sr. Manager InfoSec) - Remote

Overview

The AppSec Pentest Manager leads a team of highly qualified penetration testers in First Citizens Bank’s AppSec Testing Program. This leader is a strategic partner with application development teams and IT teams. In this role the Pentest Manager must be able to demonstrate deep knowledge of penetration testing processes such as the OWASP Top 10, Penetration Testing Execution Standard (PTES), and CREST Pentesting Methodologies. This role will lead the penetration testing team in identifying, classifying, and reporting complex vulnerabilities against First Citizens Bank’s custom applications.
Remote eligible.

Responsibilities & Qualifications

Duties & Responsibilities:

• Penetration Testing Strategy – Expert level of skill in strategy development that integrates into the overall AppSec and Vulnerability Management Strategy, SDLC, and First Citizens Bank’s Risk Appetite. This role should be able to expertly establish a regular penetration testing cadence that aligns with First Citizens Bank’s Cyber Security Standards. This role will also identify areas of improvement for the penetration testing team and drive the improvement projects to completion.
• Program Management – Ability to establish a penetration testing schedule and cadence with multiple inputs and coordination between multiple teams. Expert ability to identify schedule slippages early and remediate them to ensure applications follow First Citizens Bank standards. Ability to rapidly switch gears if an urgent need arises.
• Managerial Functions – Establishes and monitors expectations to achieve company and department goals. Manages the performance, training, and evaluation of assigned staff. Creates development plans for assigned staff to ensure their skillsets remain at the highest level. Responsible for vendor management and procurement of tools and services.
• Penetration Testing Subject Matter Expert – Provide expert technical advice to internal team members on penetration testing methodology. Provide expert technical advice to internal clients on the overall impact of penetration testing findings and recommendations for remediation. Partner with Application teams to drive the closure of penetration testing findings. Partner with application teams, BISOs, GRC, and IT Teams to ensure exceptions are properly documented and in line with First Citizens Bank’s risk appetite.
• Reporting – Regularly report metrics. Expert ability to analyze data from various sources to answer important business questions and identify trends or issues from the data.
• Communication – Ability to communicate risk to a variety of audiences, deftly changing style and level of detail accordingly. Expert ability to discuss significance of data to C-Level executives and above. Communication to direct supervisor, clearly and concisely articulating risks and issues.