Security Lead

FNZ; Pune District; On-site; INR 1,400,000 - 1,800,000; Full time

Job summary

FNZ is seeking a Penetration Testing Lead in Pune, India, to guide the local team in supporting global penetration testing services. This role involves assessing vulnerabilities, conducting thorough penetration tests, and developing security strategies to enhance protection for platforms servicing over 20 million customers.

The ideal candidate will have strong technical expertise, proven experience in line management, and professional penetration testing qualifications. Join us to help drive innovation and secure our services.

Qualifications

• Proven technical knowledge of web applications and infrastructure.
• Deep exploit and vulnerability knowledge beyond automated approaches.
• Scripting and coding skills essential for penetration testing.

Responsibilities

• Provide vulnerability assessments and penetration testing services.
• Design and perform penetration tests simulating cyber attacks.
• Document findings with detailed reports on test results.

Skills

Technical knowledge of web applications

Deep exploit and vulnerability knowledge

Scripting and coding skills

Strong understanding of operating systems

Knowledge of network protocols

Proven line management experience

Knowledge of NIST CSF and ISO27001

Experience in security documentation

Ability to manage stakeholders

Communication skills in information security

Professional penetration testing qualifications

Job description

Reports to: Platform testing and security testing lead

Job Title: Penetration Testing Lead

Location: Pune, India

Job Summary: At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. In the Security Technology and Operations team, we are embedding cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people. We are looking for a Penetration Testing Lead to report within the Cloud & Platform Security Team. The lead will guide the India penetration testing team supporting the global pen‑testing service to increase coverage of security testing across infrastructure, applications, mobile devices, cloud platforms and endpoints. The service will use a mix of internal resources, technology and 3rd‑party vendors.

Specific Role Responsibilities

• Offer global vulnerability assessment and penetration testing services, detecting system weaknesses and making recommendations for mitigation.
• Design and perform penetration tests to simulate cyber attacks with integration of threat and incidents into penetration testing priorities.
• Document findings including detailed reports on test results.
• Develop and engineer penetration testing services, including automation scripts.
• Train colleagues on penetration testing techniques and provide oversight of penetration testing results.
• Maintain security testing operating procedures.
• Support initiatives to mature security controls, services and processes.
• Support the delivery of the Information Security strategy.
• Support the creation and delivery of security reporting and MI.
• Support the development and delivery of consistent global services that enable delivery of the business goals.

Experience Required

Primary Requirements

• Proven technical knowledge of web applications, applications and infrastructure components such as cloud platforms, mobile devices, networks and infrastructure endpoints.
• Deep exploit and vulnerability knowledge beyond automated approaches.
• Scripting and coding skills.
• Strong operating system understanding and knowledge of network protocols.
• Proven line management experience.
• Good knowledge of the practical implementation of information security and risk frameworks such as NIST CSF, ISO27001, NIST 800‑53 and COBIT, and knowledge of auditing frameworks such as ISAE3402 and SOC2.
• Experience in developing and managing formal security documents.
• Proven ability to manage internal stakeholders through a journey of improving information security maturity.
• Good ability to communicate information security and risk concepts to stakeholders.
• Professional penetration testing security qualifications.

Commitment to Equal Opportunities

At FNZ, we recognise that diversity, equity and inclusion are important factors contributing to our success. We embrace the unique perspective and capabilities of our current and future employees, which will help us continue to drive innovation and achieve our business goals. Recruitment decisions at FNZ are made in a non‑discriminatory manner without regard to gender, ethnicity/race, faith, age, nationality, gender identity, sexual orientation, marital status, socio‑economic background, disability or military veteran status. All applicants and employees are valued and respected.

In addition, we want to ensure accessibility needs are well supported. If you require specific support, please advise us.