What You'll Do:
- Perform regular onsite and offsite VM scanning activities and asset inventory mapping for IT/OT systems and endpoints.
- Analyse and review the VM scanning results and report critical exposure to CISO.
- Prepare and compile VM compliance reports that are compiled from newly discovered and existing vulnerabilities for management reporting.
- Manage VM scanning tools in terms of their usage and configurations to ensure accurate coverage and tuning.
- Manage the master term contract for VAPT by the vendors.
- Liaise with various system/application team on conduct of VAPT using master term contract and management of the VAPT reports.
- Collaborate with CDOC, red/purple teams, and threat intelligence to correlate vulnerabilities with real-world threats.
- Ensure alignment with internal standard and regulatory standards (e.g. ISO 27001 and CCOP).
What You'll Need:
- Bachelor's degree in Cybersecurity, Computer Science, or related field.
- 5+ years of experience in cybersecurity, with 3+ years in vulnerability management.
- Experience with enterprise vulnerability scanning platforms (Tenable, Qualys, etc.).
- Strong understanding of CVEs, CVSS, threat modeling, and security frameworks (NIST, CIS, MITRE ATT&CK).
- Demonstrated ability to lead cross-functional teams and drive remediation.
What We'll Provide:
- Immerse in a positive work environment that promotes/fosters teamwork and collaboration .
- You will receive attractive remuneration for good performance.
- You will work in teams that thrive on collaboration for outstanding achievements.
Thank you for your interest in SP Group. You will be contacted if you are shortlisted for an interview.
