Penetration Test Program Manager (Cybersecurity)

Location: Onsite in Southlake, TX or Austin, TX, United States

Salary: USD $148,300–$190,000 per year, plus bonus or incentive opportunities.

Company

hirify.global is a financial services company with a technology risk management organization supporting cybersecurity assurance and governance.

What you will do

• Coordinate the administration, execution, governance, documentation, reporting, and continuous improvement of the penetration testing program.
• Facilitate testing engagements across applications and APIs, infrastructure and cloud environments, AI solutions, and emerging technologies.
• Partner with penetration testers, technology teams, cybersecurity stakeholders, application developers, risk managers, and external vendors.
• Analyze testing results to identify systemic risks, recurring vulnerabilities, emerging threats, and control weaknesses.
• Prepare thematic analyses, executive briefings, dashboards, metrics, and risk reporting to support decision-making.
• Improve remediation outcomes, risk visibility, governance, and the overall maturity of the testing program.

Requirements

• Bachelor’s degree in information security, cybersecurity, computer science, information technology, business, risk management, or a related field.
• 5+ years of experience in cybersecurity, technology risk management, information security, GRC, program management, or a related discipline.
• Experience coordinating complex initiatives, penetration testing programs, or security assurance activities.
• Strong analytical and communication skills, including the ability to present technical and risk information to technical and non-technical audiences.
• Experience developing reports, dashboards, metrics, presentations, and executive briefings.
• Experience working in highly regulated environments with strong governance and documentation requirements.

Nice to have

• Experience reviewing security findings, vulnerability assessments, penetration testing results, or technology risk assessments.
• Knowledge of NIST CSF, NIST 800-53, NIST 800-115, FFIEC guidance, PCI DSS, or similar frameworks.
• Certifications such as CISSP, CISM, CRISC, CISA, Security+, CCSK, CGRC, or PMP.
• Experience with vulnerability management, red team, application security, cloud security, security operations, or third-party testing programs.
• Experience with thematic analysis, vendor coordination, executive reporting, and risk metrics in financial services.

Culture & Benefits

• In-office collaboration is expected, with the selected candidate working onsite in the specified location.
• 401(k) with company match and employee stock purchase plan.
• Paid vacation, volunteering time, and a 28-day sabbatical after five years for eligible positions.
• Paid parental leave, adoption, and family-building benefits.
• Health, dental, and vision insurance, plus tuition reimbursement.