Penetration Testing & Vulnerability Management Specialist

You will play a key role in strengthening the bank’s cyber security posture across EMEA, supporting Penetration Testing, Vulnerability Management, CBEST and DORA-related testing. Working closely with global security teams and senior stakeholders, you will drive vulnerability remediation, enhance cyber resilience frameworks and support regulatory compliance in a complex international banking environment.

What you'll bring:

• Support the delivery of Penetration Testing, Vulnerability Assessments and Cyber Resilience Testing across EMEA within a global banking environment.
• Coordinate CBEST, TIBER-EU and DORA-related testing, ensuring compliance with regulatory requirements and industry security standards.
• Manage the end-to-end Vulnerability Management lifecycle, including vulnerability identification, risk assessment, prioritisation, remediation tracking and escalation.
• Collaborate with Cyber Security, Infrastructure, Cloud, Application Security and third-party vendors to coordinate security testing and drive timely remediation.
• Monitor critical vulnerabilities, remediation progress and outstanding risks, ensuring appropriate escalation and alignment with security policies and SLAs.
• Produce Cyber Security Risk Reports, Vulnerability KPIs and management dashboards, communicating key findings and remediation progress to senior stakeholders.
• Contribute to the continuous improvement of security testing frameworks, governance processes and cyber resilience capabilities.

What you'll do:

• Hands-on experience in Penetration Testing, Vulnerability Management or Cyber Security Testing, ideally within banking or financial services.
• Good understanding of NIST, ISO 27001, OWASP and cyber resilience regulations, including DORA and CBEST.
• Experience using penetration testing or vulnerability assessment tools.
• Relevant certifications such as OSCP, CREST, GIAC or equivalent technical security qualifications.
• Strong stakeholder management, analytical and reporting skills, with the ability to communicate technical risks to senior management.
• Knowledge of cloud security, security automation or scripting would be advantageous.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates