Penetration Testing Manager (Sr. Manager InfoSec) - Remote

First Citizens Bank•Raleigh, NC

16h•Remote

About The Position

The AppSec Pentest Manager leads a team of highly qualified penetration testers in First Citizens Bank’s AppSec Testing Program. This leader is a strategic partner with application development teams and IT teams. In this role the Pentest Manager must be able to demonstrate deep knowledge of penetration testing processes such as the OWASP Top 10, Penetration Testing Execution Standard (PETS), and CREST Pentesting Methodologies. This role will lead the penetration testing team in identifying, classifying, and reporting complex vulnerabilities against First Citizens Bank’s custom applications. Remote eligible.

Requirements

Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information security or technology
Deep knowledge of penetration testing processes such as the OWASP Top 10, Penetration Testing Execution Standard (PETS), and CREST Pentesting Methodologies.

Nice To Haves

At least one on industry standard certification related to penetration testing and/or cybersecurity leadership (CISSP, CISM, GPEN, GWAPT, OSCP, OSWA)
Experience with agentic pentesting

Responsibilities

Develop penetration testing strategy that integrates into the overall AppSec and Vulnerability Management Strategy, SDLC, and First Citizens Bank’s Risk Appetite.
Establish a regular penetration testing cadence that aligns with First Citizens Bank’s Cyber Security Standards.
Identify areas of improvement for the penetration testing team and drive the improvement projects to completion.
Establish a penetration testing schedule and cadence with multiple inputs and coordination between multiple teams.
Identify schedule slippages early and remediate them to ensure applications follow First Citizens Bank standards.
Rapidly switch gears if an urgent need arises.
Establishes and monitors expectations to achieve company and department goals.
Manages the performance, training, and evaluation of assigned staff.
Creates development plans for assigned staff to ensure their skillsets remain at the highest level.
Responsible for vendor management and procurement of tools and services.
Provide expert technical advice to internal team members on penetration testing methodology.
Provide expert technical advice to internal clients on the overall impact of penetration testing findings and recommendations for remediation.
Partner with Application teams to drive the closure of penetration testing findings.
Partner with application teams, BISOs, GRC, and IT Teams to ensure exceptions are properly documented and in line with First Citizens Bank’s risk appetite.
Regularly report metrics.
Analyze data from various sources to answer important business questions and identify trends or issues from the data.
Communicate risk to a variety of audiences, deftly changing style and level of detail accordingly.
Discuss significance of data to C-Level executives and above.
Clearly and concisely articulate risks and issues to direct supervisor.