Penetration Testing Program Manager (Global Security)

RBC • Toronto, ON

8d • Onsite

About The Position

Reporting to the Director, Application Security, you will be responsible for overseeing the execution, compliance, and continuous improvement of RBC’s enterprise-wide penetration testing program. You would ensure penetration tests are completed on schedule, manage vendor relationships, maintain regulatory compliance, and drive operational efficiency. You would also act as a critical liaison between external vendors, asset owners, risk teams, and senior leadership, while proactively addressing risks, escalations, and program evolution to align with industry standards and organizational growth.

Requirements

• 5+ years of experience in security testing, vulnerability management, or cybersecurity program management.
• Experience in planning, executing, and overseeing penetration testing for internet-facing and internal applications.
• Expertise in maintaining compliance with regulatory requirements (e.g., NIST, ISO 27001) and managing control documentation/testing.
• Demonstrated ability to build relationships, manage escalations, and hold vendors accountable for deliverables.
• Strong skills in creating/maintaining process documentation and defining KPIs to measure program effectiveness.
• Experience identifying, mitigating, and communicating risks to senior leadership, with a track record of driving operational improvements.

Nice To Haves

• Certifications in information security (e.g., CISSP, CCSP, CRISC, CIAM, ITIL)
• Previous work experience within the financial sector or other large enterprise industry.
• General knowledge of penetration testing methodologies, tools, and techniques, including web application penetration testing, mobile penetration testing and network penetration testing.
• Experience with agile methodologies and tools, such as Jira, for backlog management and sprint planning.
• PMP certification.

Responsibilities

• Manage the end-to-end execution of 250+ annual penetration tests, ensuring compliance with deadlines and regulatory requirements, while overseeing vendor performance and scoping.
• Deliver bi-weekly status reports to senior management, highlighting program health, risks, and initiatives.
• Define, document, and maintain program processes, control frameworks, and evidence for audits, ensuring alignment with internal and external standards.
• Drive program transformation to enhance efficiency, coverage, cost-effectiveness, and stakeholder experience, including integration of new subsidiaries.
• Address escalations, proactively mitigate risks, and foster collaboration with vendors, asset owners, and risk/governance teams.

Benefits

• A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation.
• Leaders who support your development through coaching and managing opportunities.
• Opportunities to work with the best in the field.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• A world-class training program in financial services.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed