Job Description

What You'll Do:

Strategy & Operations

Define and execute the enterprise penetration testing strategy, ensuring alignment with business objectives and security risks.
Oversee testing engagements, methodologies, quality assurance, reporting, and delivery.
Manage team capacity, resources, third-party providers, KPIs, and KRIs.
Drive AI-first transformation, automation, and operational efficiency.

Technical Leadership

Provide technical oversight across application, API, cloud, network, mobile, infrastructure, and AI security testing.
Ensure testing aligns with industry standards, frameworks, and best practices.
Review and approve findings, risk ratings, and remediation recommendations.

People Leadership

Lead, mentor, and develop a high-performing team of penetration testers and security engineers.
Manage recruitment, performance, capability development, career progression, and succession planning.
Foster a culture of technical excellence, innovation, and continuous learning.

Risk, Governance & Stakeholder Management

Translate technical findings into business risks and actionable recommendations.
Deliver executive reporting on testing coverage, security risks, emerging threats, and remediation progress.
Support audit, compliance, regulatory requirements, and strategic security initiatives.
Act as a trusted advisor to business and technology stakeholders.

Continuous Improvement & Innovation

Enhance testing effectiveness, coverage, scalability, and operational maturity.
Evaluate and adopt emerging security testing tools, techniques, and AI-driven capabilities.
Standardise methodologies, playbooks, reporting, and knowledge-sharing practices.

Qualifications

What We're Looking For:

Bachelor's degree in cyber security, Computer Science, IT, or equivalent experience.
Relevant certifications such as OSCP, OSEP, OSWE, CREST, CISSP, CISM, GIAC, or equivalent.
8+ years of experience in penetration testing, offensive security, or application security, including 3+ years in people management.
Proven experience leading security testing teams within a large enterprise environment.
Develop, manage, and mature enterprise penetration testing programmes.

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.

Life at Experian

Support for every family: Maternity, paternity and adoption leave for all parents, plus subsidised childcare for all employees.
Care when it matters most: Employee Assistance Program, Mental Health First Aiders, and compassionate and domestic violence leave.
Flexibility that fits your life: Flexible work arrangements, with generous annual, sick and family care leave.
A community where you belong: Employee Resource Groups, paid volunteer leave and recognition through our One Experian program.
Growth at every stage: Career mentoring, Harvard Manage Mentor, Experian University and e-learning platforms.

Experian Careers - Creating a better tomorrow together

Experian Careers - Creating a better tomorrow together

Application Security Manager