Associate Penetration Testing Program Manager

Location: Toronto, ON (Hybrid – 3 days onsite)

Duration: 6-Month Contract

Rate: $50–63/hr Inc.

Start: ASAP

Overview

Our financial services client is seeking an Associate Penetration Testing Program Manager to support an enterprise-wide cybersecurity penetration testing program. The successful candidate will bring cybersecurity program management experience and oversee the execution, compliance, vendor management, risk, and reporting associated with a large-scale penetration testing program.

Responsibilities

- Oversee the execution and tracking of 250+ annual penetration tests
- Ensure testing is completed according to established timelines, standards, and regulatory requirements
- Monitor vendor performance and hold external partners accountable for deliverables
- Maintain program processes, controls, documentation, and audit evidence
- Manage risks, issues, escalations, and remediation activities
- Partner with security, asset owners, vendors, and risk/governance teams
- Develop KPIs and metrics to measure program effectiveness
- Prepare regular program status, risk, and performance reporting for senior leadership
- Identify opportunities to improve cybersecurity testing processes and controls

Required Qualifications
- 3+ years of experience in cybersecurity program management, security testing,



or vulnerability management
- Experience with regulatory and security control frameworks such as NIST or ISO 27001
- Strong vendor and stakeholder management experience
- Experience managing cybersecurity risks, issues, and escalations
- Strong process and control documentation skills
- Experience developing program metrics and KPIs
- Strong executive reporting and communication skills
- Experience with Jira/Confluence, Excel, and PowerPoint

Nice to Have
- Knowledge of penetration testing methodologies, including web application, mobile, and network penetration testing
- CISSP, CCSP, CRISC, CIAM, ITIL or similar security certification
- Financial services or large enterprise experience
- Agile delivery experience
- PMP certification

Ideal Candidate: A cybersecurity skilled with strong program management skills who understands penetration testing and vulnerability management environments. This role is best suited to someone who can manage a high-volume security testing program, vendors, controls, risk, and executive reporting rather than a traditional PCO focused primarily on project administration. Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.

📌 Penetration Test Manager (Toronto)
🏢 Infotek Consulting
📍 Toronto