Lead Threat & Vulnerability Manager — Multi-Cloud

AirAsia X; Subang Jaya; On-site; MYR 120,000 - 200,000; Full time

Job summary

AirAsia X in Malaysia is seeking a dedicated professional to own and evolve our vulnerability management program across multi-cloud and legacy environments. You will define risk-based prioritization using CVSS, asset criticality, and exploitability metrics, and collaborate with ICT, SRE, and business units to drive remediation and patching accountability.

This role offers the chance to influence security posture across a regional airline and contribute to robust cyber defense across diverse

Qualifications

• Own and evolve the end-to-end vulnerability management program across multi-cloud, modern infrastructure, and legacy environments.
• Define risk-based prioritization logic combining vulnerability severity (CVSS), asset criticality, and active exploitability metrics.
• Collaborate closely with ICT, SRE, and business unit stakeholders to enforce remediation timelines and drive patching accountability.

Responsibilities

• Own and evolve the end-to-end vulnerability management program across multi-cloud, modern infrastructure, and legacy environments.
• Define risk-based prioritization logic combining vulnerability severity (CVSS), asset criticality, and active exploitability metrics.
• Collaborate closely with ICT, SRE, and business unit stakeholders to enforce remediation timelines and drive patching accountability.

Job description

AirAsia X in Malaysia is seeking a dedicated professional to own and evolve our vulnerability management program across multi-cloud and legacy environments. You will define risk-based prioritization using CVSS, asset criticality, and exploitability metrics, and collaborate with ICT, SRE, and business units to drive remediation and patching accountability.

This role offers the chance to influence security posture across a regional airline and contribute to robust cyber defense across diverse