Cybersecurity Tester

IMPRESSIVE COMMUNICATION SDN BHD; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

IMPRESSIVE COMMUNICATION SDN BHD is seeking a professional to lead external penetration testing activities, coordinating with third parties and validating testing efforts for public-facing systems, IPs and domains.

The role includes planning and scoping, triaging vulnerabilities, and maintaining testing dashboards for audits and compliance, including PCI DSS, ISO 27001 and RMiT. You will monitor threat exposure and act as audit liaison during engagements.

Responsibilities

• Manage and execute end-to-end external penetration testing activities in collaboration with third-
• Plan, scope, and validate testing efforts related to public-facing systems, IPs, and domains
• Coordinate security assessments for third-party platforms (SaaS, PaaS, outsourced environments)
• Support VAPT compliance efforts for industry frameworks (PCI DSS, ISO 27001, RMiT)
• Track and manage closure of vulnerabilities, ensuring timely remediation within agreed SLAs
• Maintain testing dashboards and reports for management, audits, and compliance tracking
• Monitor external threat exposure and validate risk levels based on threat intelligence
• Enforce VAPT process governance including scheduling, control gates, and evidence collection
• Act as point of contact during audits and external testing engagements
• Ensure adherence to internal cybersecurity policies and procedures

Job description

A professional at this position level must have the following responsibilities:

• Manage and execute end-to-end external penetration testing activities in collaboration with third-
• Plan, scope, and validate testing efforts related to public-facing systems, IPs, and domains
• Coordinate security assessments for third-party platforms (SaaS, PaaS, outsourced environments)
• Support VAPT compliance efforts for industry frameworks (PCI DSS, ISO 27001, RMiT)
• Track and manage closure of vulnerabilities, ensuring timely remediation within agreed SLAs
• Maintain testing dashboards and reports for management, audits, and compliance tracking
• Monitor external threat exposure and validate risk levels based on threat intelligence
• Enforce VAPT process governance including scheduling, control gates, and evidence collection
• Act as point of contact during audits and external testing engagements
• Ensure adherence to internal cybersecurity policies and procedures