Cyber Assurance: Penetration Testing Lead

ASX; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

ASX is seeking a skilled security testing professional to join the Cyber Architecture and Assurance team in Sydney. You will lead ASX’s end-to-end penetration testing program, coordinate Red Team and Purple Team activities, and manage relationships with external vendors to ensure timely, high-quality testing and remediation.

You will translate risk into testing objectives, govern scope, and work with diverse stakeholders to strengthen ASX’s cyber assurance posture across applications, APIs,

Qualifications

• Background in information security, penetration testing principles, vulnerability assessment and risk-based security assurance.
• Exposure to the delivery lifecycle for security testing or assurance engagements, including planning and governance.
• Experience working with external security vendors or penetration testing providers and delivery coordination.
• Ability to translate risk into testing objectives, rules of engagement and remediation priorities.
• Exposure to testing across complex environments including applications, APIs, infrastructure and cloud.
• Ability to influence stakeholders and drive accountability across multiple teams.
• Knowledge of engagement governance, escalation paths, reporting cadence and quality expectations.
• Familiarity with contemporary security testing methodologies and relevant cyber frameworks.

Responsibilities

• Coordinate the end-to-end penetration testing program, including planning, engagement governance, and remediation follow-up.
• Coordinate Red Team and Purple Team activities and translate outcomes into control improvements.
• Define scope and rules of engagement for tests, aligning with system criticality and risk.
• Manage relationships with external testing providers, ensuring quality and timely delivery.
• Support budget forecasting and tracking for testing activities and provider spend.
• Prepare stakeholders with test readiness and ensure safe, compliant execution.

Skills

Information security

Penetration testing

Vulnerability assessment

Risk-based security assurance

Stakeholder influence

Engagement governance

Security frameworks

Education

Security certifications (OSCP/GPEN/CISSP/CISM)

Job description

ASX is seeking a skilled security testing professional to join the Cyber Architecture and Assurance team in Sydney. You will lead ASX’s end-to-end penetration testing program, coordinate Red Team and Purple Team activities, and manage relationships with external vendors to ensure timely, high-quality testing and remediation.

You will translate risk into testing objectives, govern scope, and work with diverse stakeholders to strengthen ASX’s cyber assurance posture across applications, APIs,