Cybersecurity Tester

IMPRESSIVE COMMUNICATION SDN BHD; Selangor; On-site; MYR 60,000 - 120,000; Full time

Job summary

Jora Malaysia is seeking a professional to lead and execute end-to-end external penetration testing activities in collaboration with third parties. You will plan, scope and validate testing efforts related to public-facing systems, IPs and domains.

In addition, you will coordinate security assessments for third-party platforms, support VAPT compliance with PCI DSS, ISO 27001 and RMiT, track and remediate vulnerabilities, and act as the main contact during audits and external engagements.

Responsibilities

• Manage and execute end-to-end external penetration testing activities in collaboration with third-
• Plan, scope, and validate testing efforts related to public-facing systems, IPs, and domains
• Coordinate security assessments for third-party platforms (SaaS, PaaS, outsourced environments)
• Support VAPT compliance efforts for industry frameworks (PCI DSS, ISO 27001, RMiT)
• Track and manage closure of vulnerabilities, ensuring timely remediation within agreed SLAs
• Maintain testing dashboards and reports for management, audits, and compliance tracking
• Monitor external threat exposure and validate risk levels based on threat intelligence
• Enforce VAPT process governance including scheduling, control gates, and evidence collection
• Act as point of contact during audits and external testing engagements
• Ensure adherence to internal cybersecurity policies and procedures

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

A professional at this position level must have the following responsibilities:

• Manage and execute end-to-end external penetration testing activities in collaboration with third-
• Plan, scope, and validate testing efforts related to public-facing systems, IPs, and domains
• Coordinate security assessments for third-party platforms (SaaS, PaaS, outsourced environments)
• Support VAPT compliance efforts for industry frameworks (PCI DSS, ISO 27001, RMiT)
• Track and manage closure of vulnerabilities, ensuring timely remediation within agreed SLAs
• Maintain testing dashboards and reports for management, audits, and compliance tracking
• Monitor external threat exposure and validate risk levels based on threat intelligence
• Enforce VAPT process governance including scheduling, control gates, and evidence collection
• Act as point of contact during audits and external testing engagements
• Ensure adherence to internal cybersecurity policies and procedures