DescriptionThe followingPrimary Role
The following tasks are the main ones (but not limited) to the role:
- Familiarise and own the pen test plan for baseline and project pen tests
- Plan pen tests by quarter and execute required deliverables as required (scoping SOWs etc)
- Work and interact with Application owners to plan and execute tests as needed
- Work with the Scrum Master for the pen test area to ensure planned tests are factored and agreed such that the necessary PBIs for application owners is in place
- Manage the complete lifecycle of a pen test from start to completion
- Work with the third parties to plan resources and costs accordingly
- Work with the pen test team and the technical people to look at ways to improve the testing in the following areas:
- Coverage
- Efficiency of tests (combine SAST & DAST testing with pen test to increase the testing process)
- Look at ways of automating processes requests and deliverables to increase efficiency (you are not expected to write the scripts or whatever; just to identify opportunities
- Run the triweekly meetings with the team to manage issues align tasks and manage resources
- Work with Applications owners for:
- Plan tests for the annual baselines and for the quarter pen tests
- Providing the Intake forms infra availability results delivery and Itrack allocation
- Escalate application owners who fail to deliver the required inputs in time to support planned pen tests
- Work with Third party Providers to
- Plan annual pen tests and resources needed
- Work out any issues arising
- Provide the Statements of Work and agree the scope
- Achieve signoff from 3rd parties to provide the correct resources and costs that have been agreed
- Work with management to:
- Support the reporting of the pen tests and the information needed to support any monthly or quarterly reporting
- Appraise of any issues and request support where these issues will prevent the execution of a test or tests
- Provide a forecast and actuals on a monthly basis to track progress.
Required Experience:
IC