Associate Manager, Cyber Security Operations (Vulnerability Management)

Permodalan Nasional Berhad; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Permodalan Nasional Berhad in Kuala Lumpur seeks an Associate Manager to strengthen vulnerability management and advance cyber security posture through proactive identification, assessment and remediation of security gaps.

You will work with Technology teams, business units and security partners to coordinate vulnerability assessments, improve controls and embed VAPT activities across project lifecycles.

Qualifications

• Bachelor's degree in IT, CS or related field.
• At least 3 years in information and cyber security.
• Exposure to vulnerability assessment and penetration testing preferred.
• Certifications such as CEH, CompTIA PenTest+, Security+, OSCP, CISA, CISM are an advantage.

Responsibilities

• Support planning, execution and governance of vulnerability assessments and testing.
• Coordinate identification, prioritisation, tracking and remediation of vulnerabilities.
• Oversee vulnerability management tools, dashboards and reporting.
• Collaborate across teams, vendors and security service providers on VAPT and remediation.

Skills

Vulnerability management

Cyber security

Stakeholder management

IT security governance

Education

Bachelor's Degree in Information Technology, Computer Science or related field

Job description

Are you passionate about strengthening cyber resilience and staying ahead of emerging security risks? We are looking for an Associate Manager to support our Vulnerability Management function and help safeguard our IT environment through proactive identification, assessment and remediation of security vulnerabilities.

In this role, you will work closely with Technology teams, business stakeholders and security partners to coordinate vulnerability assessments, improve security controls and strengthen our overall cyber security posture.

What You’ll Be Doing

• Support the planning, execution and governance of Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Coordinate the identification, assessment, prioritisation, tracking and timely remediation of vulnerabilities across IT systems.
• Oversee vulnerability management tools, dashboards and reporting to improve risk prioritisation and support informed decision-making.
• Work with Technology teams, business units, vendors and security service providers on VAPT exercises, security advisory and remediation support.
• Support Red Team and Purple Team exercises, maintain security documentation and embed VAPT activities within project and system lifecycles.
• Bachelor’s Degree in Information Technology, Computer Science or a related field.
• At least 3 years of experience in information and cyber security; exposure to vulnerability assessment and penetration testing is preferred.
• Strong knowledge of vulnerability management, cyber security practices, secure development lifecycle and IT security governance.
• Ability to interpret technical findings, assess risk and recommend practical mitigation actions.
• Strong communication and stakeholder management skills, with the ability to collaborate across teams, vendors and service providers.
• Relevant certifications such as CEH, CompTIA PenTest+, Security+, Microsoft Security, OSCP, CISA, CISM or equivalent are an advantage.