Lead Penetration Tester

About the role

The Penetration Testing squad at ANZ protects the bank by actively identifying cyber‑security threats across systems, services and applications. As Lead Penetration Tester you will provide authoritative leadership for testing strategy, execution integrity and continuous improvement, delivering meaningful risk reduction and executive confidence.

Key responsibilities

• Plan, prioritize and drive penetration testing activities across ANZ’s enterprise environment.
• Assure the safety, integrity and effectiveness of all testing engagements.
• Identify vulnerabilities in complex environments and translate findings into clear, actionable recommendations.
• Shape and evolve penetration testing standards, QA processes, policies and operating models.
• Define risk‑based testing strategies aligned with the threat landscape and business priorities.
• Engage senior leaders and executives to communicate outcomes and assurance.
• Assess internal capability and external providers to ensure quality and value.
• Drive continual improvement and innovation in penetration testing practices.

Required profile

• 10+ years of penetration testing experience, including lead or principal responsibilities.
• Relevant cyber‑security certifications (e.g., OSCP, CRTP, CEH) and advanced credentials such as CISSP, GPEN.
• Strong alignment with industry‑standard frameworks (OWASP, PTES).
• Proven expertise across web, API/Microservices, mobile, thick‑client, AI, biometric and embedded systems.

Required skills

• Penetration testing
• Vulnerability assessment
• OWASP framework
• PTES methodology
• Web application security
• API and microservices security
• Mobile application security
• AI system security
• Biometric system security
• Embedded system security
• OSCP certification
• CISSP certification
• GPEN certification
• CEH certification
• CRTP certification