Assistant Vice President, Pen Test Coordinator

About CLS: CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies.

Requirements

by over 96% on average, so clients can put their capital and resources to better use. CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market. Our ambition to make a positive difference starts with our people.

Our values underpin everything that we do at CLS and define our working environment: Pivotal purpose Trusted guardian Targeted innovation Facilitate connections Delivering excellence Inclusive culture Job Information: Functional Title: Pen Test Coordinator Department: IT Security Corporate Level: Assistant Vice President Reports To: Director of Pen Testing Location: London Overview of the role: The Pen Test Coordinator is responsible for ensuring that penetration tests are executed efficiently, monitoring remediation activities, and reporting on the state of testing and findings to senior management. Working with multiple external penetration test vendors and internal security and technical staff, they ensure that all test pre-requisites are in place, including access authorizations, and the onboarding of external testers into the CLS network. In addition, unremediated findings are tracked and monitored, and the state of testing and findings are reported on a regular basis to various security committees and to the board.

and to further develop the CLS pen testing capability. What you will be doing: Managing day to day relationships with Pen Test Vendors: Act as the primary interface between external pen test vendors and CLS. Ensure vendor pen test rig images are obtained and updated as needed.

for the test are authorized, actioned and removed after the test, Onboard and offboard external pen testers to CLS, Ensure any blocking issues are resolved or escalated if necessary. Findings management: Documenting pen test findings and observations, Tracking the remediation progress of findings, Obtaining suitable evidence of remediation to support closure. Escalation management: Assemble data on SLA breaches and present to the escalation forum, Follow up on escalation actions to ensure remediation stays on track.

Metrics production: Produce accurate and timely metrics on penetration testing to support governance, regulatory and audit enquiries. Support the ongoing management and development of pen testing at CLS: Participate in market research into new vendors and pen testing capabilities, and subsequent roll out into production use. Production and maintenance of run books, Enhancement of pen testing infrastructure, standards and procedures.

What We Are Looking For

: Experience in IT security (3-5 years), including 1-2 years coordinating security assessments or vulnerability remediation, Production of metrics and reports on vulnerability management, Strong stakeholder management across security, vendors and technical teams, Operating within regulated