Vulnerability Management & Security Governance Lead

Standard Chartered; Klang City; Hybrid; MYR 180,000 - 260,000; Full time

Benefits offered by this job

Flexible working options

Wellbeing support

Learning & development opportunities

Job summary

Standard Chartered is seeking a Vulnerability Management lead to consolidate risk visibility across operational and executive forums. You will drive standardization of VM practices, collaborate with technology teams to interpret infrastructure risks, and support strategies to mitigate security threats while ensuring confidentiality, integrity, and availability of systems.

The role prioritizes governance, reporting, and escalation of critical vulnerabilities, with emphasis on automating processes

Qualifications

• Proven experience in enterprise-level vulnerability management and risk assessment.
• Ability to lead cross-functional teams and manage stakeholders in a regulated banking environment.
• Familiar with remediation lifecycles and security controls implementation.

Responsibilities

• Drive vulnerability management governance across WRB and ensure timely remediation of critical vulnerabilities.
• Standardize VM processes, exception management, and action plans across cluster CISOs.
• Collaborate with technology teams to understand infrastructure and mitigation controls.

Skills

Cyber Security & ICT Controls

Leadership & Stakeholder Management

Vulnerability Management

Security Risk Assessment

Education

Degree holder

CISSP/CISA/CISM certifications

Technical certifications

Tools

PowerPoint

Excel

Job description

Standard Chartered is seeking a Vulnerability Management lead to consolidate risk visibility across operational and executive forums. You will drive standardization of VM practices, collaborate with technology teams to interpret infrastructure risks, and support strategies to mitigate security threats while ensuring confidentiality, integrity, and availability of systems.

The role prioritizes governance, reporting, and escalation of critical vulnerabilities, with emphasis on automating processes