Vulnerability Response Lead — 24x7 Incident & Remediation

Two95 International Inc.; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Two95 International Inc. in Malaysia seeks an experienced Vulnerability Response Manager to own the end-to-end lifecycle of critical vulnerabilities across our environments.

You will lead cross-functional collaboration, drive playbooks, and deliver timely risk reduction while reporting to stakeholders. Key responsibilities include coordinating incident and crisis management, maintaining remediation governance, and ensuring 24x7 coverage for vulnerability events in a fast-paced security

Qualifications

• 5-8 years of experience in Vulnerability Management, Security Operations, Incident Response, or related cyber security disciplines.
• Experience supporting 24x7 security operations, on-call rotations, or major incident management activities.
• Experience coordinating major incidents, crisis communications, and stakeholder collaboration.
• Strong understanding of CVE, CVSS, threat intelligence, and cyber risk management.
• Experience in regulated environments such as financial services.

Responsibilities

• Own operational vulnerability management following VA assessment and prioritisation, driving end-to-end response for high-profile vulnerabilities.
• Coordinate cross-functional stakeholders to execute mitigation and remediation activities.
• Lead vulnerability response bridges, action tracking, and escalation processes.
• Drive remediation governance and oversee execution through to closure with risk reduction.
• Participate in 24x7 vulnerability response coverage, including on-call support and after-hours activities.

Skills

Vulnerability Management

Incident Management

Remediation Governance

Crisis Management

Stakeholder Communication

Risk Assessment

Job description

Two95 International Inc. in Malaysia seeks an experienced Vulnerability Response Manager to own the end-to-end lifecycle of critical vulnerabilities across our environments.

You will lead cross-functional collaboration, drive playbooks, and deliver timely risk reduction while reporting to stakeholders. Key responsibilities include coordinating incident and crisis management, maintaining remediation governance, and ensuring 24x7 coverage for vulnerability events in a fast-paced security