IT & Security (1)

About CLS:

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment:

Pivotal purpose
Trusted guardian
Targeted innovation
Facilitate connections
Delivering excellence
Inclusive culture

Job Information:

Functional title - Director, Penetration Testing
Department - Cyber Security
Corporate level - Director
Report to - Director, Application Security
Location - Iselin, NJ (Hybrid onsite 2 days per week)
Expected full-time salary range between $170,000 - $210,000 + variable compensation + 401(k) match + benefits.
Note: Disclosure as required by NJ Pay Transparency Law of the expected salary compensation range for this role.

Summary

As the Director of Penetration Testing, you will be responsible for the design, delivery and continuous improvement of penetration testing across the organization’s technology estates, including on premise and cloud systems.

Based in the New Jersey office, you will lead the delivery of penetration testing services across critical financial market infrastructure and internal systems. This includes owning third-party vendor engagements end to end, ensuring testing is appropriately scoped and executed to a high standard. You will also oversee the Penetration Test Coordinator to ensure effective planning, tracking and governance of all testing activities. In parallel, you will establish and build an internal penetration testing capability. You will define methodologies, standards and operating practices to deliver high quality, defensible results and demonstrate the value of internal testing.

This is hands-on Director-level role combining service ownership, technical execution and program development. You will be accountable for the overall effectiveness of penetration testing as a control function. The successful candidate will bring deep penetration testing expertise alongside experience managing testing programs and working with third party vendors in a structured, risk-driven environment.

Responsibilities

Own the end-to-end delivery of penetration testing across the organization’s technology estates.
Establish and maintain penetration testing standards, methodologies and quality benchmarks.
Define testing scope, priorities and coverage aligned to system criticality and risk.
Track remediation progress and validate closure of findings.
Own the selection, implementation and management of penetration test tooling and platforms.
Define internal testing methodologies, playbooks, tooling and reporting standards.
Own third party penetration test engagements, including rules of engagement, vendor selection and onboarding.
Track and report on third party vendor performance and outcomes.
Define and maintain KPIs/KRIs to measure penetration testing effectiveness, including severity and trend analysis, time to remediation and recurring control weaknesses.
Deliver structured reporting for senior stakeholders.
Line management of the Penetration Test Coordinator.

Qualifications

Extensive experience in cybersecurity with a minimum of 5 years conducting hands on penetration testing.
Ability to scope and execute end-to-end penetration testing from planning through to exploitation and reporting.
Proven ability to lead, design, build and operate a pen testing capability or program.
Experience managing third party penetration test providers and assuring quality of delivery.
Experience working in structured risk-driven environments (financial sector or other highly regulated industries preferred).
Excellent communication skills for reporting and stakeholder engagement.
Experience leading or mentoring others and ability to scale a function over time.
Certifications in offensive security and pen testing (e.g. OSCP, GIAC) are useful, but not essential.
Bachelor's or Master's degree in Cyber Security, Information Technology, or a related field.

Our commitment to employees:

At CLS, we celebrate inclusion and consider this to be one of our strongest assets. We are committed to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including:

Holiday - UK/Asia: 25 holiday days and 3 ‘life days’ (in addition to bank holidays). US: 23 holiday days.
2 paid volunteer days so that you can actively support causes within your community that are important to you.
Generous parental leave policies to ensure you can enjoy valuable time with your family.
Parental transition coaching programmes and support services.
Wellbeing and mental health support resources to ensure you are looking after yourself, and able to support others.
Employee Networks (including our Women’s Forum, Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about inclusivity.
Hybrid working to promote a healthy work/life balance, enabling employees to work collaboratively in the office when needed and work from home when they don’t.
Active support of flexible working for all employees where possible.
Monthly ‘Heads Down Days’ with no meetings across the whole company.
Generous non-contributory pension provision for UK/Asia employees, and 401K match from CLS for US employees.
Private medical insurance and dental coverage.
Social events that give you opportunities to meet new people and broaden your network across the organisation.
Annual flu vaccinations.
Discounts and savings and cashback across a wide range of categories including health and retail for UK employees.
Discounted Gym membership – Complete Body Gym Discount/Sweat equity program for US employees.
All employees have access to Discover – our comprehensive learning platform with 1000+ courses from LinkedIn Learning.
Access to frequent development sessions on a number of topics to help you be successful and develop your career at CLS.

Director – Penetration Testing

CLS Group

Compensation Overview

Simplify's Take

What believers are saying

What critics are saying

What makes CLS Group unique

Your Connections

Benefits

Company News