Deputy Manager/Manager (Security Vulnerability Management)

PSA Corporation; Pasir Panjang; On-site; MYR 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in Negeri Sembilan is seeking an experienced Vulnerability Management Specialist to oversee the enterprise-wide vulnerability management lifecycle. You will manage scans and remediation projects, analyze vulnerabilities, and work cross-functionally with IT teams. The ideal candidate has at least 5 years of experience in cybersecurity and strong knowledge of vulnerability management tools and frameworks. Competitive compensation and opportunities for professional growth are offered.

Qualifications

• 5+ years of experience in cybersecurity, 2+ years focused on vulnerability management.
• Strong knowledge of vulnerability scanning tools and security frameworks (CVSS, MITRE ATT&CK, NIST).
• Understanding of operating systems (Windows, Linux), networks, web applications, and cloud environments.

Responsibilities

• Oversee vulnerability management lifecycle including identifying and remediating security vulnerabilities.
• Manage scans, penetration tests, and asset inventory mapping.
• Analyze vulnerabilities using CVSS scores and coordinate remediation efforts.

Skills

Strong analytical thinking

Stakeholder engagement

Cross-functional coordination

Problem-solving

Strong communication

Education

Bachelor’s degree in Cybersecurity, Computer Science, or related field

Tools

Tenable

Security Information and Event Management (SIEMs)

Configuration Management Database (CMDBs)

Vulnerability scanning tools

Job description

You will be responsible for overseeing the enterprise-wide vulnerability management lifecycle, including identifying, assessing, prioritizing, and driving the remediation of security vulnerabilities across systems, applications, and infrastructure to reduce cyber risk exposure. This role requires strong technical skills, cross-functional coordination, and experience with vulnerability management tools and risk frameworks.

You will manage regular scans, penetration tests, and asset inventory mapping, ensuring full coverage and alignment with the organization’s risk tolerance and compliance requirements. You'll analyze and prioritize vulnerabilities using CVSS scores, exploitability, and asset criticality, while coordinating remediation efforts with IT and engineering teams. In addition, you will oversee tools such as Tenable and ensure integration with SIEMs, CMDBs, and ticketing systems. You’ll deliver key metrics and dashboards to senior management, support audits, define patch ownership across teams, and lead or guide the vulnerability management function. You will also participate in incident response, working with threat intelligence and red teams to address high-risk vulnerabilities.

Requirements

- Bachelor’s degree in Cybersecurity, Computer Science, or a related field

- At least 5+ years of experience in cybersecurity, with 2+ years focused on vulnerability management

- Strong knowledge of vulnerability scanning tools and security frameworks (CVSS, MITRE ATT&CK, NIST)

- Understanding of operating systems (Windows, Linux), networks, web applications, and cloud environments

- Experience managing cross-functional remediation projects

- Preferably with the following certifications - CISSP, CISM, OSCP, CEH, or similar

- ITIL and PMP certifications for project and process management

- Excellent communication and stakeholder engagement skills

- Strong analytical thinking and problem-solving ability

- Proven experience in managing multiple priorities and delivering under pressure

Only shortlisted candidates will be notified.