An Initial AI Screening will be conducted for this role

Duration

: 6 months

Daily Responsibilities

- Monitor the end-to-end execution of 250+ annual penetration tests, ensuring compliance with deadlines and regulatory requirements

- Oversee vendor performance, ensuring processes are followed, reporting is accurate, and gaps/errors are addressed.

- Document and maintain program processes and evidence for audits, ensuring alignment with internal and external standards.

- Address escalations, proactively mitigate risks, and foster collaboration with vendors, asset owners, and risk/governance teams.

- Prepare bi-weekly status reports for senior management, highlighting program health, risks, and initiatives.

What program/technology/software knowledge is essential for this role?

- Jira/Confluence

- Excel

- PowerPoint

Must-have Skills:

- Cyber Security Program Management: 3+ years of experience in security testing, vulnerability management, or cybersecurity program management.

- Regulatory &
- Control Frameworks: Experience in maintaining compliance with regulatory requirements (e.g., NIST, ISO 27001) and managing control documentation/testing.

- Stakeholder &

- Vendor Management:



Demonstrated ability to build relationships, manage escalations, and hold vendors accountable for deliverables.

- Process Documentation &

- Metrics: Strong skills in creating/maintaining process documentation and defining KPIs to measure program effectiveness.

- Risk Management &

- Reporting: Experience identifying, mitigating, and communicating risks to senior leadership, with a track record of driving operational improvements.

Nice-to-have Skills:

- Certifications in information security (e.g., CISSP, CCSP, CRISC, CIAM, ITIL)

- Previous work experience within the financial sector or other large enterprise industry

- General knowledge of penetration testing methodologies, tools, and techniques, including web application penetration testing, mobile penetration testing and network penetration testing

- Experience with agile methodologies and tools, such as Jira, for backlog management and sprint planning

- PMP certification

Soft skills

:

- Organized

- Excellent communication skills

- Able to multitask

- Ability to work in a fast-paced setting

📌 Associate Penetration Test Program Manager (Toronto)
🏢 FP
📍 Toronto