Responsibilities:

Own and manage the Vulnerability Management process across enterprise systems
Serve as primary advisor on vulnerability findings and remediation strategies
Plan and execute the full lifecycle (scan, assess, remediate, report)
Ensure vulnerability scans are configured, scheduled, and executed properly
Perform risk assessment & prioritisation based on business impact
Collaborate with Infrastructure & Application teams to drive remediation efforts
Manage false positives and risk acceptance processes with stakeholders
Maintain dashboards and reports for both technical and management audiences
Track and ensure compliance with KPIs and security standards
Lead penetration testing remediation planning
Conduct threat exposure analysis and recommend mitigation actions
Drive continuous service improvement initiatives
Ensure compliance with security, regulatory, and internal policies

Requirements:

Degree in Computer Science / IT / Engineering or equivalent
Professional certifications preferred: CISSP, GIAC (GEVA) or equivalent, CREST
Minimum 10 to 12 years of IT experience, including 6 to 8 years in IT Security and at least 5 years in enterprise-level Vulnerability Management
Familiar with ITIL processes
Technical Skills:
Hands-on experience with Vulnerability Management tools (e.g. Tenable / Nessus)
Strong knowledge of vulnerability assessment and remediation
Strong understanding of operating systems (Windows, Linux/Unix)
Good knowledge of network and application security
Ability to assess vulnerabilities and prioritise remediation using a risk-based approach
Scripting knowledge in PowerShell or SQL
Experience in reporting and dashboarding (Excel, PowerPoint, Power BI or similar)
Nice to Have:
Experience in financial services environment
Exposure to penetration testing & threat assessment

Work Schedule:

To apply, please visit and search for Job Reference: 4R8VX367

To learn more about this opportunity, please contact Yingying at [HIDDEN TEXT]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

Cyber Security Lead (Vulnerability Management) – 1 year contract