The Embedded Security Auditing Program Manager is integral to our client's global security framework that protects, sustains, and enables their business to thrive. They will oversee the effectiveness of security measures through penetration tests and assessments that mimic real-world attacks targeting agreed-upon objectives, including business critical technical and physical systems. The Programme Manger aims to improve security operations, identify vulnerabilities and fortify the enterprise's defenses against potential threats.
Essential Functions:
- Represent Pinkerton's core values of integrity, vigilance, and excellence.
- Security Auditing resourcing - Acquiring actors with relevant experience on an ad hoc basis for Security Auditing exercises at Client's locations.
- Assist with scenario development and exercise planning and testing at all sites.
- Design the exercise SoW to share with the pre-approved vendors for clear and concise proposal submissions.
- Management and tracking of the teams covert kit list
- Work with the Global Security's legal team to understand any potential legal issues for localized penetration testing exercises.
- Become an active member of a Global Security Auditing and/or act as Security Auditing leader where the operational requirements are.
- Managing the remediation tracker, which tracks what actions are taken to mitigate vulnerabilities identified during the penetration test exercises.
- Drafting of post exercise reports, including a summary of the exercise, exercise objectives and level of success, vulnerabilities identified, and high-level recommendations.
- Deliver post exercise overview to multi stakeholder audience.
- Support various Security Auditing activities including intelligence gathering, threat assessment, social engineering, covert and overt security testing, and vulnerability assessments.
- Work closely with the remediation team lead to ensure continuity of recommendations and status.
- Travel across EMEA and APAC to oversee exercises in person
- All other duties, as assigned.
Education, Experience, and Certifications:
Bachelor's degree (master's preferred) and ten or more years of corporate security management experience, or an equivalent combination of education and experience sufficient to perform the essential functions of the job, as determined by the company. Pinkerton is an inclusive employer who seeks candidates with diverse backgrounds, experiences, and perspectives.
Competencies:
- Experience with Penetration Testing.
- Possesses a working knowledge of physical security systems and components.
- Understanding security operations, risk management, and quality management.
- Experience with the collection and analysis of threat intelligence.
- Experience in stakeholder engagement and management.
- Strong project management skills.
- Serve as a supportive, collaborative, and innovative team member.
- Able to adapt as the external environment and the organization evolves.
- Effective written and verbal communication skills, at all levels within the organisation, and across diverse cultures.
- Able to manage multiple tasks/projects with competing deadlines and priorities.
- Able to work in a fast-paced, ever-changing, ambiguous, and complex environment.
- Able to appropriately define, prioritize, recommend, and resolve problems.
- Self-starter with the ability to identify task/priorities that bring value to the organisation.
- Computer skills; Standard software packages.
Working Conditions:
With or without reasonable accommodation, requires the physical and mental capacity to effectively perform all essential functions;
- Exposure to sensitive and confidential information.
- Regular computer usage.
- Must be able to see, hear, speak, and write clearly in order to communicate with employees and/or customers.
- Occasional reaching and lifting of small objects and operating office equipment.
- Ability to adjust focus between close and distance vision.
- Travel, as required.
Pinkerton is an equal opportunity employer to all applicants and positions without regard to race/ethnicity, color, national origin, ancestry, sex/gender, gender identity/expression, sexual orientation, marital/prenatal status, pregnancy/childbirth or related conditions, religion, creed, age, disability, genetic information, veteran status, or any protected status by local, state, federal or country-specific law.