VAPT Programme Lead

Lavu Tech Solutions; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Tenaga Nasional Berhad (TNB) seeks a Resident Engineer to provide on-site programme management for enterprise-wide VAPT. The role blends governance with technical depth to review and challenge test results.

You will coordinate between system owners, internal security teams and VAPT providers, ensuring engagements are planned, executed, reported and closed in a consistent, auditable manner.

Qualifications

• Bachelor’s degree in Computer Science, IT, Engineering, Cyber Security or equivalent.
• 8+ years ICT, with 5+ years cybersecurity experience.
• 3+ years hands-on VAPT delivery as tester/leader/reviewer.
• 3+ years experience managing security assessment projects and third-party providers.
• Proven ability to manage multiple concurrent security testing engagements.
• Knowledge of OWASP Top 10, PTES, NIST SP 800-115, CVSS, MITRE ATT&CK.
• Knowledge of ISO/IEC 27001, NIST CSF, Malaysia Cyber Security Act 2024 and PDPA.
• Proficient in Bahasa Malaysia and English.
• Malaysian citizen, able to pass security screening and NDA.

Responsibilities

• Develop and maintain the annual VAPT plan and testing calendar.
• Receive, scope and prioritise VAPT requests and prepare engagement approvals.
• Verify pre-test readiness, test accounts and safe-testing controls.
• Coordinate and monitor day-to-day execution of engagements.
• Perform QA review of VAPT reports for accuracy and risk consistency.
• Maintain a central findings register and drive remediation with owners.
• Coordinate retesting and closure of remediated findings.
• Produce monthly programme reports and quarterly dashboards.
• Support audits by providing VAPT evidence and status.
• Manage service providers and verify deliverables.
• Maintain and improve VAPT policy, methodology and SOPs.

Skills

VAPT management

Security testing

Project management

ISO/IEC 27001

Bahasa Malaysia & English

Education

Bachelor’s Degree in Computer Science or IT

Tools

VAPT methodologies

NIST/OWASP/PTES

Job description

Tenaga Nasional Berhad (TNB) seeks a Resident Engineer to provide on-site programme management for enterprise-wide VAPT. The role blends governance with technical depth to review and challenge test results.

You will coordinate between system owners, internal security teams and VAPT providers, ensuring engagements are planned, executed, reported and closed in a consistent, auditable manner.