Security Penetration Tester

Security Testing Coordinators Security testing professionals, including penetration testers and security analysts, are responsible for identifying, analyzing, and mitigating vulnerabilities in software, systems, and networks. Key responsibilities include conducting automated and manual testing, performing threat modeling, documenting security findings, and ensuring compliance with security standards to prevent data breaches. Duties & Responsibilities

• Good knowledge of IT General Controls
• Good understanding of ISO27001 and 3rd party audits
• Experience in handling complete audit processes
• Develop effective tracking, follow-up measures, and reporting of findings in a central system
• Working knowledge of Windows, Linux, and AWS
• Knowledge of system-wide information security compliance programs
• Understanding of complex enterprise systems
• Communicate effectively and efficiently internally and with clients
• Good written and verbal communication skills
• Knowledge of latest security trends and practices
• Hands-on experience with Archer is preferred

Qualifications

• ISO 27001 Lead Auditor, CISA, or similar certification

Experience / Knowledge

• Demonstrable experience in information security governance, risk and compliance
• Proven experience using information security frameworks (e.g., ISF, NIST, ISO) and data privacy principles
• Previous experience as an auditor
• Domain expertise in at least three of the following areas: + Control testing + Application development and configuration development + Access management and recertification + Change management + Finding management + Operating systems
• Third-party assurance testing

Mandatory Skills

• Vulnerability management
  Good knowledge of IT General Controls
• Good understanding of ISO27001 and 3rd party audits
• Experience in handling complete audit processes
• Develop effective tracking, follow-up measures, and reporting of findings in a central system
• Working knowledge of Windows, Linux, and AWS
• Knowledge of system-wide information security compliance programs
• Understanding of complex enterprise systems
• Communicate effectively and efficiently internally and with clients
• Good written and verbal communication skills
• Knowledge of latest security trends and practices
• Hands-on experience with Archer is preferred, ISO 27001 Lead Auditor, CISA, or similar certification, Demonstrable experience in information security governance, risk and compliance
• Proven experience using information security frameworks (e.g., ISF, NIST, ISO) and data privacy principles
• Previous experience as an auditor
• Domain expertise in at least three of the following areas: + Control testing + Application development and configuration development + Access management and recertification + Change management + Finding management + Operating systems
• Third-party assurance testing