External Penetration Testing & VAPT Specialist

IMPRESSIVE COMMUNICATION SDN BHD; Selangor; On-site; MYR 60,000 - 120,000; Full time

Job summary

Jora Malaysia is seeking a professional to lead and execute end-to-end external penetration testing activities in collaboration with third parties. You will plan, scope and validate testing efforts related to public-facing systems, IPs and domains.

In addition, you will coordinate security assessments for third-party platforms, support VAPT compliance with PCI DSS, ISO 27001 and RMiT, track and remediate vulnerabilities, and act as the main contact during audits and external engagements.

Responsibilities

• Manage and execute end-to-end external penetration testing activities in collaboration with third-
• Plan, scope, and validate testing efforts related to public-facing systems, IPs, and domains
• Coordinate security assessments for third-party platforms (SaaS, PaaS, outsourced environments)
• Support VAPT compliance efforts for industry frameworks (PCI DSS, ISO 27001, RMiT)
• Track and manage closure of vulnerabilities, ensuring timely remediation within agreed SLAs
• Maintain testing dashboards and reports for management, audits, and compliance tracking
• Monitor external threat exposure and validate risk levels based on threat intelligence
• Enforce VAPT process governance including scheduling, control gates, and evidence collection
• Act as point of contact during audits and external testing engagements
• Ensure adherence to internal cybersecurity policies and procedures

Job description

Jora Malaysia is seeking a professional to lead and execute end-to-end external penetration testing activities in collaboration with third parties. You will plan, scope and validate testing efforts related to public-facing systems, IPs and domains.

In addition, you will coordinate security assessments for third-party platforms, support VAPT compliance with PCI DSS, ISO 27001 and RMiT, track and remediate vulnerabilities, and act as the main contact during audits and external engagements.