Penetration Testing Manager: Programme Lead

Decipher Bureau; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Decipher Bureau, in partnership with a major Australian FinTech, is seeking a Penetration Testing Manager to own and drive a comprehensive security testing programme. You will coordinate scoping, planning, and remediation across complex technology environments while engaging application, infra, and cloud stakeholders.

The role balances hands-on security expertise with governance, reporting and continuous improvement, including AI-enabled testing capabilities and external provider management.

Qualifications

• Background in security consulting, penetration testing, offensive security or technical security assurance.
• Experience managing or coordinating penetration testing engagements across complex technology environments.
• Strong technical understanding of penetration testing methodologies, vulnerabilities and risk assessment.
• Excellent stakeholder management skills, with the ability to engage technical teams, external vendors and senior business stakeholders.
• A proactive, structured approach to managing testing programmes, resolving blockers and driving outcomes.

Responsibilities

• Own the end-to-end penetration testing programme, including scoping, planning, coordination, reporting and remediation.
• Manage external penetration testing providers and coordinate Red Team and Purple Team activities.
• Work closely with application, infrastructure, cloud and business stakeholders to ensure testing engagements are delivered effectively.
• Review testing findings, assess security risks and drive accountability for remediation.
• Contribute to continuous improvement initiatives, including emerging AI-enabled and automated security testing capabilities.

Skills

Security consulting

Penetration testing

Offensive security

Technical security assurance

Job description

Decipher Bureau, in partnership with a major Australian FinTech, is seeking a Penetration Testing Manager to own and drive a comprehensive security testing programme. You will coordinate scoping, planning, and remediation across complex technology environments while engaging application, infra, and cloud stakeholders.

The role balances hands-on security expertise with governance, reporting and continuous improvement, including AI-enabled testing capabilities and external provider management.