Director, Penetration Testing

About CLS:

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counter parties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars' worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world's most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment:

• Pivotal purpose
• Trusted guardian
• Targeted innovation
• Facilitate connections
• Delivering excellence
• Inclusive culture

• Functional title - Director, Penetration Testing
• Department - Cyber Security
• Corporate level - Director
• Report to - Director, Application Security
• Location - Iselin, NJ (Hybrid onsite 2 days per week)
• Expected full-time salary range between $170,000 - $210,000 + variable compensation + 401(k) match + benefits.
• Note:
  
  Disclosure as required by NJ Pay Transparency Law of the expected salary compensation range for this role.

As the Director of Penetration Testing, you will be responsible for the design, delivery and continuous improvement of penetration testing across the organization's technology estates, including on premise and cloud systems.

Based in the New Jersey office, you will lead the delivery of penetration testing services across critical financial market infrastructure and internal systems. This includes owning third-party vendor engagements end to end, ensuring testing is appropriately scoped and executed to a high standard. You will also oversee the Penetration Test Coordinator to ensure effective planning, tracking and governance of all testing activities.

In parallel, you will establish and build an internal penetration testing capability. You will define methodologies, standards and operating practices to deliver high quality, defensible results and demonstrate the value of internal testing.

This is hands‑on Director‑level role combining service ownership, technical execution and program development. You will be accountable for the overall effectiveness of penetration testing as a control function. The successful candidate will bring deep penetration testing expertise alongside experience managing testing programs and working with third‑party vendors in a structured, risk‑driven environment.

• Own the end‑to‑end delivery of penetration testing across the organization's technology estates.
• Establish and maintain penetration testing standards, methodologies and quality benchmarks.
• Define testing scope, priorities and coverage aligned to system criticality and risk.
• Track remediation progress and validate closure of findings.
• Own the selection, implementation and management of penetration test tooling and platforms.
• Define internal testing methodologies, playbooks, tooling and reporting standards.
• Own third party penetration test engagements, including rules of engagement, vendor selection and onboarding.
• Track and report on third party vendor performance and outcomes.
• Define and maintain KPIs/KRIs to measure penetration testing effectiveness, including severity and trend analysis, time to remediation and recurring control weaknesses.
• Deliver structured reporting for senior stakeholders.
• Line management of the Penetration Test Coordinator.

• Extensive experience in cybersecurity with a minimum of 5 years conducting hands‑on penetration testing.
• Ability to scope and execute end‑to‑end penetration testing from planning through to exploitation and reporting.
• Proven ability to lead,…