Decipher Bureau are partnering with a major Australian FinTech to recruit a Penetration Testing Manager within its Cyber Security function.

This is an opportunity to take ownership of an established penetration testing programme across a complex, business-critical technology workplace.

The role will suit someone with a strong security consulting or penetration testing background who enjoys the delivery, coordination and stakeholder engagement side of cyber security.

This isn't a purely hands-on penetration testing role, nor is it solely focused on governance and reporting. We're looking for someone technically credible, proactive and organised who can manage testing engagements from initial scoping through to remediation.

Key responsibilities

- Own the end-to-end penetration testing programme, including scoping, planning, coordination, reporting and remediation.
- Manage external penetration testing providers and coordinate Red Team and Purple Team activities.
- Work closely with application, infrastructure, cloud and business stakeholders to ensure testing engagements are delivered effectively.
- Review testing findings, assess security risks and drive accountability for remediation.
- Contribute to continuous improvement initiatives, including emerging AI-enabled and automated security testing capabilities.

What we're looking for
- Background in security consulting, penetration testing, offensive security or technical security assurance.




- Experience managing or coordinating penetration testing engagements across complex technology environments.
- Strong technical understanding of penetration testing methodologies, vulnerabilities and risk assessment.
- Excellent stakeholder management skills, with the ability to engage technical teams, external vendors and senior business stakeholders.
- A proactive, structured approach to managing testing programmes, resolving blockers and driving outcomes.

Nice to have
- Previous hands-on penetration testing experience.
- Exposure to Red Team or Purple Team exercises.
- Experience within fintech, financial services, critical infrastructure or other high-availability environments.
- Knowledge of automated or AI-enabled security testing.
- Certifications such as OSCP, GPEN, CISSP or CISM.

Why consider this opportunity? You'll have the opportunity to take genuine ownership of a security testing programme within an organisation where technology resilience and security are critical.

The role offers a outstanding balance of technical engagement, stakeholder influence and programme ownership, with exposure to specialist offensive security activities and emerging security testing technologies.

It's particularly well suited to an experienced security consultant looking to move into a position with greater ownership and influence.

Interested?

If this sounds like something you'd be interested in, apply directly or reach out to me for a confidential discussion to learn more about the opportunity.

📌 Penetration Testing Manager (Sydney)
🏢 Decipher Bureau
📍 Sydney