Vulnerability Management Specialist

Generali Insurance Malaysia Berhad; Puchong; On-site; MYR 90,000 - 130,000; Full time

Job summary

AXA Group Operations is seeking a cybersecurity professional to lead vulnerability assessments across servers, networks, and applications. Join a global team that translates security data into actionable remediation, advising IT production and development teams on effective risk-based solutions.

The role focuses on vulnerability management and application security, combining hands-on expertise with cross-functional influence in a technology-driven organisation.

Qualifications

• 3+ years in vulnerability management or application security.
• Experience with vulnerability management lifecycle and risk prioritisation.
• Knowledge of SAST/DAST and patch management.
• Ability to translate security data into remediation actions.

Responsibilities

• Lead vulnerability assessments across servers, networks, and apps.
• Prioritise vulnerabilities by exposure, business impact and risk appetite.
• Translate security data into practical remediation recommendations.
• Advise teams on effective remediation strategies and compensating controls.
• Coordinate remediation actions with local security and IT teams.
• Assess risk using established methodologies and document status.

Skills

Vulnerability management

Application security

Security assessments

Data analysis

Stakeholder communication

Risk analysis

Education

Bachelor's or Diploma in IT/Cs

Tools

Qualys

Tenable

Burp Suite

Checkmarx

Job description

Join AXA Group Operations and help strengthen cybersecurity across a global, technology-led organisation.

Three reasons to consider this opportunity:

• Make a visible security impact: Identify critical vulnerabilities, influence remediation priorities and help protect business-critical infrastructure and applications.
• Work at global scale: Collaborate with security, IT production and application teams across an international organisation operating in 17 countries.
• Grow as a cybersecurity expert: Expand your expertise across vulnerability management, application security, risk analysis and security advisory.

About the Role

You will join the Cyber Defense Security Operations team, focusing on Vulnerability Management and Application Security.

As a trusted technical specialist, you will turn vulnerability data into clear, risk-based actions. You will help teams understand their exposure, prioritise the issues that matter most and implement effective remediation or compensating controls.

This role offers the opportunity to combine hands-on security expertise, data analysis and cross-functional influence in an organisation where technology and innovation are central to transformation.

What You’ll Do

• Lead vulnerability assessments across servers, network devices, web applications and supporting infrastructure.
• Identify and prioritise critical vulnerabilities based on technical exposure, business impact and risk appetite.
• Translate structured and unstructured security data into practical remediation recommendations.
• Advise IT production and application teams on effective, sustainable remediation strategies.
• Coordinate with local security and IT teams to drive vulnerabilities through to resolution.
• Recommend compensating controls when immediate remediation is not possible.
• Assess risk using established security methodologies and support appropriate risk-acceptance decisions.
• Maintain clear visibility of remediation progress, outstanding exposure and vulnerability status.
• Investigate security issues using vulnerability scans, alerts and web application security-testing results.

What You’ll Bring

• At least three years of professional experience in vulnerability management, application security or a closely related cybersecurity discipline.
• Strong knowledge of vulnerability assessment and infrastructure security reviews.
• Practical understanding of SAST, DAST, patch management, network security, server administration and system hardening.
• Experience with vulnerability and application-security technologies such as Qualys, Tenable, Burp Suite or Checkmarx.
• The ability to analyse complex security information and convert it into focused, actionable recommendations.
• Confidence working with technical and non-technical stakeholders in an international environment.
• Strong written communication, presentation and problem-solving skills.
• A diploma, bachelor’s degree or equivalent learning and experience in IT, computer science, cybersecurity or a related field.

What Will Make You Stand Out

• Experience applying security controls to operational technology services.
• Cybersecurity certifications such as CISSP, GWEB or CEH.
• Experience creating concise, decision-ready reporting with Microsoft Office, Power BI or similar tools.
• A methodical approach to ownership and follow-through, combined with a drive to improve efficiency.
• The ability to balance technical severity with business context when recommending priorities.

What We Offer

• The opportunity to influence vulnerability reduction across a large, international organisation.
• Exposure to infrastructure security, application security, Cyberdefense and risk management.
• Collaboration with skilled teams across security, technology, data and business operations.
• A role at the heart of AXA’s transformation into a sustainable, technology-led company.
• An environment that values innovation, courage, integrity, collaboration and customer focus.
• Meaningful opportunities to deepen your technical expertise and broaden your influence as a cybersecurity professional.

Diversity & Inclusion Statement

AXA is committed to equal opportunity and to creating a workplace where everyone is treated with dignity and respect. We welcome different backgrounds, experiences and perspectives, including applications from women, LGBTQ+ people, people with disabilities and people of all origins.

If this opportunity interests you but you do not meet every listed qualification, we still encourage you to apply. Your experience and potential may be exactly what the team needs.