Application Security Manager

What You'll Do:

Strategy & Operations

• Define and execute the enterprise penetration testing strategy, ensuring alignment with business objectives and security risks.
• Oversee testing engagements, methodologies, quality assurance, reporting, and delivery.
• Manage team capacity, resources, third-party providers, KPIs, and KRIs.
• Drive AI-first transformation, automation, and operational efficiency.
Technical Leadership

• Provide technical oversight across application, API, cloud, network, mobile, infrastructure, and AI security testing.
• Ensure testing aligns with industry standards, frameworks, and best practices.
• Review and approve findings, risk ratings, and remediation recommendations.
People Leadership

• Lead, mentor, and develop a high-performing team of penetration testers and security engineers.
• Manage recruitment, performance, capability development, career progression, and succession planning.
• Foster a culture of technical excellence, innovation, and continuous learning.
Risk, Governance & Stakeholder Management

• Translate technical findings into business risks and actionable recommendations.
• Deliver executive reporting on testing coverage, security risks, emerging threats, and remediation progress.
• Support audit, compliance, regulatory requirements, and strategic security initiatives.
• Act as a trusted advisor to business and technology stakeholders.
Continuous Improvement & Innovation

• Enhance testing effectiveness, coverage, scalability, and operational maturity.
• Evaluate and adopt emerging security testing tools, techniques, and AI-driven capabilities.
• Standardise methodologies, playbooks, reporting, and knowledge-sharing practices.

Department: Information Security
Function: Information Technology
Experience Level: Not Applicable