Application Security Manager

What You'll Do: Strategy & Operations Define and execute the enterprise penetration testing strategy, ensuring alignment with business objectives and security risks. Oversee testing engagements, methodologies, quality assurance, reporting, and delivery. Manage team capacity, resources, third-party providers, KPIs, and KRIs. Drive AI-first transformation, automation, and operational efficiency. Technical Leadership Provide technical oversight across application, API, cloud, network, mobile, infrastructure, and AI security testing. Ensure testing aligns with industry standards, frameworks, and best practices. Review and approve findings, risk ratings, and remediation recommendations. People Leadership Lead, mentor, and develop a high-performing team of penetration testers and security engineers. Manage recruitment, performance, capability development, career progression, and succession planning. Foster a culture of technical excellence, innovation, and continuous learning. Risk, Governance & Stakeholder Management Translate technical findings into business risks and actionable recommendations. Deliver executive reporting on testing coverage, security risks, emerging threats, and remediation progress. Support audit, compliance, regulatory requirements, and strategic security initiatives. Act as a trusted advisor to business and technology stakeholders. Continuous Improvement & Innovation Enhance testing effectiveness, coverage, scalability, and operational maturity. Evaluate and adopt emerging security testing tools, techniques, and AI-driven capabilities. Standardise methodologies, playbooks, reporting, and knowledge-sharing practices. What We’re Looking For: Bachelor's degree in cyber security, Computer Science, IT, or equivalent experience. Relevant certifications such as OSCP, OSEP, OSWE, CREST, CISSP, CISM, GIAC, or equivalent. 8+ years of experience in penetration testing, offensive security, or application security, including 3+ years in people management. Proven experience leading security testing teams within a large enterprise environment. Develop, manage, and mature enterprise penetration testing programmes. Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers. Life at Experian Support for every family: Maternity, paternity and adoption leave for all parents, plus subsidised childcare for all employees. Care when it matters most: Employee Assistance Program, Mental Health First Aiders, and compassionate and domestic violence leave. Flexibility that fits your life: Flexible work arrangements, with generous annual, sick and family care leave. A community where you belong: Employee Resource Groups, paid volunteer leave and recognition through our One Experian program. Growth at every stage: Career mentoring, Harvard Manage Mentor, Experian University and e-learning platforms. Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here