Penetration Testing Manager

Decipher Bureau; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Decipher Bureau, in partnership with a major Australian FinTech, is seeking a Penetration Testing Manager to own and drive a comprehensive security testing programme. You will coordinate scoping, planning, and remediation across complex technology environments while engaging application, infra, and cloud stakeholders.

The role balances hands-on security expertise with governance, reporting and continuous improvement, including AI-enabled testing capabilities and external provider management.

Qualifications

• Background in security consulting, penetration testing, offensive security or technical security assurance.
• Experience managing or coordinating penetration testing engagements across complex technology environments.
• Strong technical understanding of penetration testing methodologies, vulnerabilities and risk assessment.
• Excellent stakeholder management skills, with the ability to engage technical teams, external vendors and senior business stakeholders.
• A proactive, structured approach to managing testing programmes, resolving blockers and driving outcomes.

Responsibilities

• Own the end-to-end penetration testing programme, including scoping, planning, coordination, reporting and remediation.
• Manage external penetration testing providers and coordinate Red Team and Purple Team activities.
• Work closely with application, infrastructure, cloud and business stakeholders to ensure testing engagements are delivered effectively.
• Review testing findings, assess security risks and drive accountability for remediation.
• Contribute to continuous improvement initiatives, including emerging AI-enabled and automated security testing capabilities.

Skills

Security consulting

Penetration testing

Offensive security

Technical security assurance

Job description

Decipher Bureau are partnering with a major Australian FinTech to recruit a Penetration Testing Manager within its Cyber Security function.

This is an opportunity to take ownership of an established penetration testing programme across a complex, business-critical technology environment.

The role will suit someone with a strong security consulting or penetration testing background who enjoys the delivery, coordination and stakeholder engagement side of cyber security.

This isn't a purely hands-on penetration testing role, nor is it solely focused on governance and reporting. We're looking for someone technically credible, proactive and organised who can manage testing engagements from initial scoping through to remediation.

Key responsibilities

• Own the end-to-end penetration testing programme, including scoping, planning, coordination, reporting and remediation.
• Manage external penetration testing providers and coordinate Red Team and Purple Team activities.
• Work closely with application, infrastructure, cloud and business stakeholders to ensure testing engagements are delivered effectively.
• Review testing findings, assess security risks and drive accountability for remediation.
• Contribute to continuous improvement initiatives, including emerging AI-enabled and automated security testing capabilities.

What we're looking for

• Background in security consulting, penetration testing, offensive security or technical security assurance.
• Experience managing or coordinating penetration testing engagements across complex technology environments.
• Strong technical understanding of penetration testing methodologies, vulnerabilities and risk assessment.
• Excellent stakeholder management skills, with the ability to engage technical teams, external vendors and senior business stakeholders.
• A proactive, structured approach to managing testing programmes, resolving blockers and driving outcomes.

Nice to have

• Exposure to Red Team or Purple Team exercises.
• Experience within fintech, financial services, critical infrastructure or other high-availability environments.
• Knowledge of automated or AI-enabled security testing.
• Certifications such as OSCP, GPEN, CISSP or CISM.

Why consider this opportunity?

You’ll have the opportunity to take genuine ownership of a security testing programme within an organisation where technology resilience and security are critical.

The role offers a great balance of technical engagement, stakeholder influence and programme ownership, with exposure to specialist offensive security activities and emerging security testing technologies.

It’s particularly well suited to an experienced security consultant looking to move into a position with greater ownership and influence.

Interested?