Develop and execute a comprehensive strategy to expand the penetration testing business units capabilities, market presence, and profitability.
Drive innovation by implementing emerging technologies and methodologies to stay ahead of the threat landscape.
Position the business unit as an industry thought leader through publications, speaking engagements, and partnerships.
Service Delivery Excellence
Oversee the delivery of high-quality penetration testing services across various domains, including network, application, cloud, Red Teaming, and Ransomware simulations.
Establish and enforce rigorous quality assurance standards to ensure customer satisfaction and regulatory compliance.
Address complex client challenges and provide strategic recommendations for risk mitigation.
Maintain SISAs Brand Promises
Business Growth
Collaborate with the sales and marketing teams to identify and pursue new business opportunities.
Build strong client relationships to ensure retention, satisfaction, and referrals.
Identify market trends and customer needs to develop tailored service offerings.
Team Development
Recruit, mentor, and lead a team of cybersecurity experts, including penetration testers and consultants.
Foster a culture of collaboration, innovation, and continuous learning.
Provide training and development opportunities to ensure the team remains at the forefront of industry advancements.
Thought Leadership
Contribute to the broader cybersecurity community through white papers, webinars, and industry conferences.
Serve as a trusted advisor to clients, providing insights into emerging threats and best practices.
Advocate for security awareness and proactive risk management across industries.
Qualifications
Minimum of 15 years of experience in cybersecurity, with at least 10 years in penetration testing and 3 years in a leadership role.
Strong expertise in penetration testing methodologies (e.g., OWASP, NIST, MITRE ATTCK) and tools (e.g., Burp Suite, Metasploit, Kali Linux).
Proven track record of scaling and managing profitable cybersecurity services or business units.
Deep understanding of compliance standards (e.g., ISO 27001, PCI DSS, GDPR, SOC 2).
Industry certifications such as OSCP, OSCE, CISSP, CEH, or equivalent are highly desirable.
Exceptional communication skills, with experience presenting to executive stakeholders and industry forums.
Strong business acumen and ability to align technical services with strategic goals.