Manager, Threat & Vulnerability Management

Prudential Services Asia; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Job summary

Prudential Services Asia is seeking a seasoned security professional to manage vulnerability management across cloud and on‑prem environments in Kuala Lumpur. You will collaborate with regional teams to drive remediation and ensure timely risk reduction.

The role requires deep knowledge of vulnerability tools, security baselines, and scripting in Python, with strong communication in English and relevant security certifications adding value.

Qualifications

• 5 years in Vulnerability Management and related duties.
• Experience with NIST, ISO 27001 and CIS Controls.
• Experience with baseline configuration scanning tools (Qualys/Nessus).
• Programming skills: Python.
• Security certifications (CompTIA Security+, CEH, CISSP, CISM, CISA) add value.
• Degree in Computer Science/IT/IS.

Responsibilities

• Identify security risks, threats and vulnerabilities of cloud and on‑prem infrastructure.
• Collaborate with Security Metrics for accurate vulnerability reporting.
• Provide timely threat insights to drive remediation actions.
• Develop and maintain security procedures and documentation.
• Coordinate with regional teams to drive remediation and meet SLAs.

Skills

Vulnerability Management

QualysGuard

Nessus

Python

Security Operations

PowerBI

English communication

ISO 27001

Education

Degree in CS/IT/IS

Tools

Qualys

Nessus

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Role and Responsibilities

• Identify security risks, threats and vulnerabilities of Cloud and On-Prem infrastructure, network, system, applications and related components
• To work with Security Metrics team to ensure Vulnerability Management and Compliance reporting is accurate with minimal false positives
• To provide timely and actionable threat insights to relevant teams to drive rapid remediation or control reassurance actions against the latest emerging threats.
• To develop and maintain related procedures and processes documentation
• To work closely with Regional Business teams to drive remediation activities and ensure risk mitigation, work closely with the patching team to drive remediation of vulnerabilities to meet the required SLAs

Qualifications

• 5 years technical experience in Vulnerability Management including and not limited to asset management, vulnerability tools such as Qualys, tenable with focus on security baseline development and compliance.
• Experience with common cybersecurity frameworks and standards such as NIST, ISO/IEC 27001, and CIS Controls.
• Experience in administration of baseline configuration scanning tools (Qualys, Nessus)
• Programming skills i.e. python.
• IT Security Operations Management experience would be an advantage
• Degree in Computer Science, Information Technology or Information Systems
• Security certifications CompTIA Security+, CEH, CISSP, CISM, CISA..etc would be added value.

Mandatory skills

• Define, implement and manage security baseline configurations
• Experience in Vulnerability Management tools - Minimum 2 years of hands‑on experience and knowledge on VM tools such as QualysGuard, Nessus
• Knowledge security vulnerabilities and security baseline configuration.
• Basic programming and knowledge such as python, API, macros in excel… etc. Knowing any of the above or additional scripting languages would be considered as added value.
• PowerBI fundamentals, basic DAX (Data Analysis Expressions), data connectivity, excel proficiency.
• Mandatory Language Skill: Good written and spoken communication in English
• Attitude: Problem‑solving mindset with intellectual curiosity, critical thinking and proactive solutions.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part‑time / fixed‑term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third‑party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.