Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Oversee the execution, compliance, and continuous improvement of RBC’s enterprise-wide penetration testing program. Ensure penetration tests are completed on schedule, manage vendor relationships, maintain regulatory compliance, and drive operational efficiency. Act as a critical liaison between external vendors, asset owners, risk teams, and senior leadership, while proactively addressing risks, escalations, and program evolution.

Responsibilities

Manage the end-to-end execution of 250+ annual penetration tests, ensuring compliance with deadlines and regulatory requirements, while overseeing vendor performance and scoping.
Deliver bi-weekly status reports to senior management, highlighting program health, risks, and initiatives.
Define, document, and maintain program processes, control frameworks, and evidence for audits, ensuring alignment with internal and external standards.
Drive program transformation to enhance efficiency, coverage, cost-effectiveness, and stakeholder experience, including integration of new subsidiaries.
Address escalations, proactively mitigate risks, and foster collaboration with vendors, asset owners, and risk/governance teams.

Requirements

5+ years of experience in security testing, vulnerability management, or cybersecurity program management.
Experience in planning, executing, and overseeing penetration testing for internet-facing and internal applications.
Expertise in maintaining compliance with regulatory requirements (e.g., NIST, ISO 27001) and managing control documentation/testing.
Demonstrated ability to build relationships, manage escalations, and hold vendors accountable for deliverables.
Strong skills in creating/maintaining process documentation and defining KPIs to measure program effectiveness.
Experience identifying, mitigating, and communicating risks to senior leadership, with a track record of driving operational improvements.
Certifications in information security (e.g., CISSP, CCSP, CRISC, CIAM, ITIL)
Previous work experience within the financial sector or other large enterprise industry.
General knowledge of penetration testing methodologies, tools, and techniques, including web application penetration testing, mobile penetration testing and network penetration testing.
Experience with agile methodologies and tools, such as Jira, for backlog management and sprint planning.
PMP certification.

Skills

Application Security
Application Security Testing
Collaboration
Communication
Cyber Security Management
Decision Making
Information Security Management
Infrastructure Penetration Testing
IT Security Management
Leadership
Mobile Penetration Testing
Network Penetration Testing
Penetration Testing
Program Management
Risk Management
Strategic Direction
Taking Initiative
Taking Ownership
Web Application Penetration Testing

Location

Toronto, Canada

Work Type

Full time

Experience Level

5+ years

Benefits

A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation.
Leaders who support your development through coaching and managing opportunities.
Opportunities to work with the best in the field.
Ability to make a difference and lasting impact.
Work in a dynamic, collaborative, progressive, and high-performing team.
A world-class training program in financial services.

About the Company

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.