Associate Information Security Consultant – Pentest Liaison

Truist Bank•Charlotte, NC

7d•Onsite

About The Position

This isn’t just a role. It’s a launchpad. We’re looking for a driven, high-performance, all-in operator who thrives on momentum, precision, and impact. If you’re the kind of person who brings energy to every room, turns complexity into clarity, and executes with relentless consistency, this is your arena. You’ll be front and center in a fast-moving, high-visibility offensive security program executing scheduling, intake, and amplifying elite penetration testers. You will help power a cybersecurity function that protects what matters most. This is for the builder, the communicator, the problem solver, the one who wants to grow fast, move fast, and win alongside a team that’s raising the bar every single day. Apply Today!

Requirements

Bachelor’s degree or an equivalent combination of education and work experience.
Knowledge in information systems and ability to apply that knowledge in practice.

Nice To Haves

Banking or financial services experience.

Responsibilities

Serves as a member of the offensive security coordination team, ensuring smooth operation of the team’s agile processes, OffSec exercises, and ensures pentest occur on schedule
Create and distribute comprehensive meeting minutes to include action plans for offensive security related meetings.
Speak at established routines (up to 150 people) providing updates and insights on ongoing penetration testing activities.
Run office hours to address queries and concerns from various stakeholders.
Coordinate test issues, working closely with technical teams to resolve any problems that arise during testing.
Coordinate scheduling and assignment of penetration testing engagements to security testers, ensuring efficient resource allocation and timely delivery of assessments.
Perform data entry for identified vulnerabilities, ensuring complete, accurate, and timely (CAT) documentation.
Assist with metrics compilation and reporting to track the team’s performance and progress.
Collect, organize, and maintain audit evidence to demonstrate compliance with regulatory requirements, internal policies, and industry standards.
Meet with application teams to discuss vulnerabilities, facilitating clear communication between security and development teams.
Create and maintain all documentation (e.g. standards, policies, procedures) necessary for compliance and application of application security controls and tool selection.
Provide critical support for cybersecurity technology infrastructure issues to internal clients, exercising judgement on when to escalate to senior resources.
Review and make determinations on team deliverables to ensure they meet organizational standards, quality expectations, and readiness for release.
Monitor cybersecurity systems using enterprise class monitoring systems, proactively identify potential issues, and exercise appropriate responses to events.
Occasional on call time, with nights or weekends < 10%
Analyze basic information and makes decisions within guidelines or standard practices to solve problems.
Contributes to projects by completing assigned tasks.