Cyber Security Penetration Testing Lead

About the role

Kyndryl is looking for a senior cybersecurity professional to lead its penetration testing and security validation programs. You will coordinate exposure management activities across a global technology environment, working with application owners, infrastructure teams and executive stakeholders.

Key responsibilities

• Coordinate and govern enterprise penetration testing, security validation and related activities from onboarding through remediation and closure.
• Drive vulnerability and exposure management processes, prioritising findings using risk‑based methodologies and tracking them to resolution.
• Partner with solution owners, engineering teams and remediation groups to accelerate risk reduction.
• Facilitate security findings reviews, remediation workshops, risk acceptance discussions and retest readiness assessments.
• Track and report remediation progress, risk treatment plans, service metrics and KPIs to technical and executive audiences.

Required profile

• 7+ years of experience in cybersecurity, vulnerability management, exposure management or related disciplines.
• Strong stakeholder management and communication skills, with experience presenting risks to senior leadership.
• Proven ability to work in large, complex enterprise environments and lead cross‑functional initiatives.

Required skills

• Vulnerability management and risk‑based vulnerability management (RBVM) platforms.
• Penetration testing, security assessments, Purple Team exercises and security validation methodologies.
• Attack surface management, continuous controls validation and exposure assessment.
• Cyber risk management frameworks, governance processes and security control validation.
• Relevant certifications such as CISSP, CISM, CRISC, Security+, GSEC.