Monroe Consulting Group, an Executive Recruitment firm, is partnering with a leading organisation in the Information Technology sector to hire a Cyber Threat & Vulnerability Analyst (Senior Executive). This opportunity is based in Kuala Lumpur, Malaysia.
Position Overview
This role will support the execution and continuous improvement of the organisation's Cyber Threat & Vulnerability Management (CTVM) programme through vulnerability assessment, threat monitoring, and remediation coordination.
Contribute to strengthening the organisation's cybersecurity posture by supporting risk reduction initiatives, security operations, compliance requirements, and enterprise resilience.
Key Responsibilities
- Assist in planning, analysing, developing frameworks, and deploying the Cyber Threat & Vulnerability Management programme.
- Support daily operations, including coordinating Vulnerability Assessment and Penetration Testing (VAPT) exercises with vendors, conducting internal and external vulnerability scans, prioritising findings, and tracking remediation activities.
- Maintain an accurate inventory of IT hardware, software, and cloud assets in collaboration with internal technology teams.
- Assist in identifying security vulnerabilities and supporting remediation through patching, configuration updates, code fixes, and infrastructure improvements.
- Support the implementation of cybersecurity policies and controls to ensure compliance with internal governance and regulatory requirements.
- Assist in developing policies, procedures, and operating models for cybersecurity and vulnerability management activities.
- Support the monitoring and reporting of cybersecurity KPIs and KRIs through technical and management dashboards.
- Provide technical support and security advisory services to stakeholders across the organisation.
- Support security monitoring activities and coordinate remediation actions with internal and external stakeholders.
- Stay current with emerging cybersecurity threats, vulnerabilities, attack techniques, and security trends.
Qualifications & Experience
- Bachelor's Degree or equivalent qualification in Computer Science, Information Technology, Cybersecurity, or a related discipline.
- 1-3 years of experience within Cybersecurity, IT Security, Vulnerability Management, Security Operations Centre (SOC), or related domains.
- Exposure to Vulnerability Assessment and Penetration Testing (VAPT), threat management, or security monitoring environments is advantageous.
- Relevant professional certifications are an added advantage, including:
- CEH
- ITIL
- CISA
- EC-Council Certifications
- Other security or vulnerability management certifications
Technical / Functional Expertise
- Basic understanding of IT infrastructure, networking, and cybersecurity principles.
- Familiarity with vulnerability assessment, patch management, and security monitoring practices.
- Experience with ticketing and workflow management platforms such as ServiceNow and Jira.
- Exposure to security tools including:
- Nessus Professional
- CrowdStrike Falcon
- Managed Detection & Response (MDR) solutions
- Burp Suite
- Identity Threat Protection (ITP)
- Cloud-native security solutions (AWS preferred)
- Understanding of cyber threat and vulnerability management processes.
- Exposure to Security Operations Centre (SOC) environments.
- Knowledge of penetration testing and cyber threat intelligence concepts.
- Ability to support remediation tracking, vulnerability scanning, and security reporting activities.
Soft Skills & Leadership Competencies
- Strong analytical and problem-solving abilities.
- Effective communication and stakeholder management skills.
- Ability to coordinate and collaborate with cross-functional teams and external vendors.
- Strong organisational skills with the ability to manage multiple priorities.
- Proactive approach to learning and staying current with emerging cybersecurity threats and trends.
- Ability to work independently while contributing effectively within a team environment.