Application Penetration Testing Manager, Senior Vice President

VulnU; Singapore; On-site; SGD 180,000 - 320,000; Full time

Benefits offered by this job

Paid parental leave

Home-office stipend

Equity

Job summary

The Info Security Ops Group Manager at Citi Singapore is a senior leadership role responsible for strategic direction and operational oversight of application vulnerability assessment and management services.

You will lead a team of security professionals, partner with business and tech stakeholders, and ensure delivery of high-quality AVA/AVM solutions while aligning with cybersecurity standards and regulatory requirements.

Qualifications

• 10 years of experience in application security, vulnerability assessment, and related areas.
• Experience leading cybersecurity teams and large-scale security operations.
• Strong knowledge of testing methodologies, vulnerability management, and secure SDLC.
• Cloud security, DevSecOps, and modern application architectures knowledge.

Responsibilities

• Provide strategic leadership for AVA/AVM and perimeter testing programs.
• Oversee day-to-day AVA/AVM operations and ensure service continuity.
• Monitor KPIs, quality metrics, and remediation tracking.
• Lead, mentor, and develop cybersecurity professionals in the team.
• Communicate risk insights and remediation priorities to senior leadership.

Skills

Application security

Vulnerability assessment

Vulnerability management

Penetration testing

Cybersecurity

Stakeholder management

Cloud security

DevSecOps

Security governance

Regulatory compliance

Education

Bachelor’s degree or equivalent

CISSP

CISM

GWAPT

GPEN

OSCP

Job description

# Application Penetration Testing Manager, Senior Vice PresidentCiti · citigroup.comCategory: Red Team / OffensiveLocation: Singapore SingaporeLevel: Director / VP## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave* Home-office stipend* EquityThe Info Security Ops Group Manager is a senior management level position responsible for providing strategic leadership, operational oversight, and people management for application security testing services. This role ensures the delivery of high-quality Application Vulnerability Assessment and Management (AVA/AVM) services while maintaining operational excellence, service continuity, and adherence to cybersecurity standards.The position plays a critical role in defining and executing the organization's perimeter testing strategy, helping protect critical business applications from emerging cyber threats. As a people leader, the Manager develops and leads a team of cybersecurity professionals, drives continuous service improvement, and partners with senior stakeholders to enhance the firm's overall security posture.Key ResponsibilitiesStrategic LeadershipDefine and execute the long-term strategy and roadmap for Application Vulnerability Management services.Lead the evolution of perimeter testing capabilities to address emerging threats and business requirements.Partner with senior cybersecurity leaders, technology organizations, and business stakeholders to align security testing initiatives with enterprise risk management objectives.Drive innovation, automation, and process improvements to enhance service effectiveness and efficiency.Service Delivery & OperationsOversee day-to-day AVA/AVM pentest operations, ensuring consistent delivery of high-quality vulnerability assessment services.Maintain service continuity, operational resilience, and compliance with established service level expectations.Establish and monitor key performance indicators, quality metrics, and reporting to measure program effectiveness.Ensure timely identification, assessment, prioritization, and remediation tracking of application vulnerabilities.Team Leadership & DevelopmentLead, mentor, and develop a team of cybersecurity specialists responsible for application security testing and vulnerability management activities.Foster a culture of accountability, collaboration, innovation, and continuous learning.Support workforce planning, talent development, succession planning, and employee engagement initiatives.Provide technical guidance and strategic direction to ensure consistent execution across the team.Risk Management & GovernanceEnsure AVA/AVM services operate in alignment with organizational cybersecurity policies, standards, and regulatory requirements.Identify and manage security, operational, and compliance risks associated with application security testing activities.Communicate risk insights and remediation priorities to senior management and key stakeholders.Support internal and external audit activities and demonstrate effective security governance practices.Stakeholder EngagementBuild strong relationships with technology, engineering, application development, and cybersecurity teams.Act as the primary management representative for AVA/AVM services.Present program performance, risk trends, and strategic initiatives to senior leadership.Qualifications10 years of extensive experience in application security, vulnerability assessment, vulnerability management, penetration testing, or related cybersecurity domains.Demonstrated experience leading cybersecurity teams and managing large-scale security operations.Strong understanding of application security testing methodologies, vulnerability management practices, and secure software development principles.Experience managing stakeholder relationships across technology and business organizations.Excellent leadership, communication, and organizational skills.Experience building and executing enterprise-scale application security programs.Knowledge of cloud security, DevSecOps practices, and modern application architectures.Experience driving cybersecurity transformation and service modernization initiatives. Education:Bachelor’s degree/University degree or equivalent experienceHolding relevant professional cybersecurity certifications such as CISSP, CISM, GWAPT, GPEN, OSCP, or equivalent.