Cyber Risk and Vulnerability Manager

FrieslandCampina; Petaling Jaya; On-site; MYR 180,000 - 260,000; Full time

Job summary

FrieslandCampina is seeking a Cyber Risk and Vulnerability Manager to lead and continuously improve the global Vulnerability Management capability. Based in Petaling Jaya, you will govern tools, processes, reporting, and service performance, translating vulnerabilities into business risk insights and remediation priorities.

You will manage end-to-end vulnerability lifecycle, coordinate assessments for new technologies, and support audit, assurance, and regulatory activities.

Qualifications

• Bachelor's or Master's Degree in Information Security, Cyber Security, Technology, Risk Management, Audit, or a related field.
• Minimum 5 years of experience in Cyber Security, Vulnerability Management, or Technology Risk Management.
• Proven experience managing enterprise-wide Vulnerability Management programmes, including remediation governance, risk exception management, and continuous improvement initiatives.
• Strong understanding of cyber risk management and security operations, with the ability to translate technical vulnerabilities into business risks, remediation priorities, and actionable recommendations.
• Good knowledge of security controls, IT operations, asset management, and risk-based security practices, preferably within complex enterprise environments.
• Strong stakeholder management, communication, and influencing skills, with experience driving accountability and remediation actions across technology teams, asset owners and third-party service providers. A good sense of humour will be an added advantage.
• Experience developing management reporting, dashboards, and risk metrics, coupled with a pragmatic, results-driven mindset and fluency in English.
• Professional certifications (e.g., CISSP, CISM, CRISC, CISA) and experience across IT/OT environments or M&A integrations are advantageous.

Responsibilities

• Own and continuously improve FrieslandCampina's global Vulnerability Management capability, including governance, tools, processes, reporting, and service performance.
• Lead the end-to-end vulnerability management lifecycle, ensuring vulnerabilities are identified, prioritized, remediated, and closed on time.
• Translate technical vulnerabilities and security weaknesses into business risk insights and remediation priorities.
• Review and challenge risk exception requests, ensuring appropriate compensating controls are in place.
• Develop and present management reports, dashboards, and cyber risk insights.
• Drive accountability among technology teams, asset owners, and service providers to improve remediation performance.
• Coordinate vulnerability assessments and risk reviews for new technologies, business projects, and acquisitions.
• Support audit, assurance, compliance, and regulatory activities related to vulnerability and cyber risk management.

Skills

Cyber security

Vulnerability management

Risk management

Stakeholder management

English fluency

Education

Bachelor's or Master's in Information Security

Job description

Cyber Risk and Vulnerability Manager Petaling Jaya (MY) IT & Digital 32-40

The job holder is responsible for the global Vulnerability Management capability, including its governance, operating model, reporting, and continuous improvement roadmap. The role ensures vulnerabilities are managed consistently across the organisation using a risk-based approach. It also sets remediation priorities, challenges unresolved vulnerabilities and risk exceptions, and recommends appropriate mitigation, escalation, and risk treatment actions.

Job Responsibilities:

• Own and continuously improve FrieslandCampina's global Vulnerability Management capability, including governance, tools, processes, reporting, and service performance.
• Lead the end-to-end vulnerability management lifecycle, ensuring vulnerabilities are identified, prioritized, remediated, and closed on time.
• Translate technical vulnerabilities and security weaknesses into business risk insights and remediation priorities.
• Review and challenge risk exception requests, ensuring appropriate compensating controls are in place.
• Develop and present management reports, dashboards, and cyber risk insights.
• Drive accountability among technology teams, asset owners, and service providers to improve remediation performance.
• Coordinate vulnerability assessments and risk reviews for new technologies, business projects, and acquisitions.
• Support audit, assurance, compliance, and regulatory activities related to vulnerability and cyber risk management.

Job Requirements:

• Bachelor's or Master's Degree in Information Security, Cyber Security, Technology, Risk Management, Audit, or a related field.
• Minimum 5 years of experience in Cyber Security, Vulnerability Management, or Technology Risk Management.
• Proven experience managing enterprise-wide Vulnerability Management programmes, including remediation governance, risk exception management, and continuous improvement initiatives.
• Strong understanding of cyber risk management and security operations, with the ability to translate technical vulnerabilities into business risks, remediation priorities, and actionable recommendations.
• Good knowledge of security controls, IT operations, asset management, and risk-based security practices, preferably within complex enterprise environments.
• Strong stakeholder management, communication, and influencing skills, with experience driving accountability and remediation actions across technology teams, asset owners and third-party service providers. A good sense of humour will be an added advantage.
• Experience developing management reporting, dashboards, and risk metrics, coupled with a pragmatic, results-driven mindset and fluency in English.
• Professional certifications (e.g., CISSP, CISM, CRISC, CISA) and experience across IT/OT environments or M&A integrations are advantageous.

For thousands of people every day, we are more than just a dairy company. To our farmers, our employees, the communities we serve, the businesses we work with and the people to whom we bring happiness, FrieslandCampina means something more. For them it's not just about what we do, but who we are. We value talented people from any background who want to contribute to something bigger than themselves. We encourage all of our employees to make decisions that benefit our entire company. At FrieslandCampina we own our own career and act accordingly. We trust you to make a difference in your job and influence the bigger picture. Working at FrieslandCampina means you are contributing to a better world. Within the CISO Office, we enable the secure use of technology across FrieslandCampina and continuously strengthen our Digital Safety capabilities. You will join an international team working across cyber risk, security architecture, security operations and resilience. In this global role, you will work closely with technology teams, asset owners and external partners to reduce cyber exposure and strengthen our overall security posture.

Why work with us:

An inspiring purpose

Better nutrition for the world and a good living for our farmers, now and for generations to come.

A cooperative culture

Driven by global collaboration, respect, and shared success

Space to aim higher, with autonomy and a clear focus

Your growth fuels ours

We invest in your personal and professional development through training and education.