Senior IT Cyber Resilience Consultant - Pen Testing & Risk

• Manage the end-to-end penetration testing lifecycle and demand
• Act as the primary contact for all pentest requests across the business
• Scope engagements and manage third-party security vendors
• Translate technical findings into actionable business risk assessments
• Utilise ServiceNow IRM to log and track the remediation lifecycle
• Ensure security control gaps are mapped against regulatory standards
• Negotiate remediation timelines and provide expert mitigation guidance

• Hands-on experience with ServiceNow IRM/GRC for risk logging and tracking
• Strong understanding of Penetration Testing methodologies (OWASP, NIST)
• Familiarity with risk frameworks such as ISO 27001, NIST CSF, or CPS 234
• Ability to translate complex technical vulnerabilities for non-technical stakeholders
• Proven stakeholder management skills at Senior Manager and Director levels
• Strong knowledge of security control frameworks and the SDLC
• Relevant certifications such as CISM, CRISC, CISSP, OSCP, or CEH

Competitive consulting rates with visa sponsorship opportunities