I'm partnering with a major Australian organisation looking for a Penetration Testing Manager to take ownership of its established security testing programme across a complex, business-critical technology environment.

This opportunity would suit someone with a strong understanding of penetration testing who enjoys the consulting, stakeholder engagement and delivery side of cyber security.

Why consider this opportunity?

- Own the end-to-end penetration testing programme, from initial scoping through to reporting and remediation.
- Gain exposure to a broad technology setting spanning applications, infrastructure and cloud.
- Coordinate Red Team and Purple Team exercises alongside specialist security providers.
- Explore emerging AI-enabled and automated penetration testing capabilities.
- Enjoy genuine ownership and senior stakeholder exposure in a role combining technical security and consulting.

Key responsibilities

- Manage the full penetration testing lifecycle, including scoping, planning, delivery, reporting and remediation.
- Coordinate external testing providers and internal technology teams to ensure successful delivery.
- Support Red Team and Purple Team activities across the organisation.
- Review technical findings, assess security risks and drive remediation outcomes.




- Present testing results and programme updates to technical teams and senior business stakeholders.

What we're looking for

- Background in penetration testing, offensive security, cyber consulting or security assurance.
- Experience managing end-to-end penetration testing engagements and external providers.
- Strong technical understanding of testing methodologies, vulnerabilities and associated risks.
- Excellent consulting and stakeholder engagement skills, with the ability to communicate technical findings to business audiences.
- A proactive, organised approach to managing multiple engagements and driving outcomes.

Nice to have

- Previous hands-on penetration testing experience.
- Exposure to Red Team or Purple Team exercises.
- Experience in financial services, critical infrastructure or complex enterprise environments.
- Knowledge of automated or AI-enabled security testing.
- Relevant certifications such as OSCP, GPEN, CISSP or CISM.

Interested?

This is a great opportunity for an experienced security consultant or penetration testing specialist looking to step into a role with greater ownership, influence and exposure to emerging security technologies.

📌 Penetration Test Manager (Sydney)
🏢 Decipher Bureau
📍 Sydney