Vulnerability Management Specialist

Singapore Power Ltd; Santo Niño 1st; On-site; PHP 1,200,000 - 1,700,000; Full time

Job summary

Singapore Power Ltd seeks an experienced Vulnerability Management professional to assess and remediate exposures across OT, SCADA, and IT environments. You will coordinate patching, vendor communications and remediation plans to minimize risk.

The role requires 5+ years in OT/SCADA, strong analytics, and hands-on experience with dashboards and reporting tools like MS Excel and PowerBI. You will contribute to audits, risk assessments and security reviews with the security council.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering or related field.
• 5+ years' experience in OT/SCADA/CII, network, infrastructure administration, IT or cybersecurity operations.
• Working knowledge of ISO 27001, CIS Benchmarks, risk assessment, network security, patch and vulnerability management.
• Strong troubleshooting skills for patching, firmware upgrades and configuration changes.

Responsibilities

• Assess vulnerabilities across OT, SCADA, CII, IT/network environments, and recommend remediation.
• Assess remediation feasibility, operational impact and compensating controls for sensitive systems; coordinate remediation plans, patch schedules and maintenance windows with teams, system owners and vendors.
• Support patch deployment, firmware upgrades and validation across servers, applications, network devices and OT systems.
• Conduct periodic scans on OT, air-gapped, enterprise and cloud environments; coordinate penetration tests and asset inventory mapping.
• Provide weekend support for emergency patches, critical deployments or maintenance windows.
• Track KPIs/KRIs on vulnerability exposure, patch compliance and SLA adherence; present dashboards and technical reports to security council and senior management.
• Prepare documentation for Change Requests, Deviations and Risk Acceptances.
• Coordinate security reviews, risk assessments and audits; follow through on auditors' or security council's recommendations.
• Support the VM Lead in facilitating remediation meetings with system owners and stakeholders.

Skills

Vulnerability management

Analytics

Dashboard reporting

MS Excel

PowerBI

Co-Pilot

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering

Tools

PowerBI

Co-Pilot

Job description

What You'll Do:

• Assess vulnerabilities across OT, SCADA, CII, IT/network environments, and recommend remediation.

• Assess remediation feasibility, operational impact and compensating controls for sensitive systems, and coordinate remediation plans, patch schedules and maintenance windows with teams, system owners and vendors.

• Support patch deployment, firmware upgrades and validation across servers, applications, network devices and OT systems.

• Conduct periodic scans on OT, air-gapped, enterprise and cloud environments; coordinate penetration tests and asset inventory mapping.

• Provide weekend support for emergency patches, critical deployments or maintenance windows.

• Track KPIs/KRIs on vulnerability exposure, patch compliance and SLA adherence, and present dashboards and technical reports to the security council and senior management.

• Prepare documentation for Change Requests, Deviations and Risk Acceptances.

• Coordinate security reviews, risk assessments and audits, and follow through on recommendations from auditors or the security council.

• Support the VM Lead in facilitating remediation meetings with system owners and stakeholders.

Technical Specializations:

• Operating Systems & Virtualization: Linux (RedHat preferred), Windows, vCenter, ESXi, Kubernetes.

• Database Management: MSSQL, Oracle, PostgreSQL.

• SAP Systems: Kernel, PO, support packages, SAP Notes.

• Application stacks: Java, .NET, Apache, nginx, IIS, Weblogic.

• Network Systems: Routers, switches, firewalls (ACI, Cisco, Arista, F5, Checkpoint, Palo Alto); network flows.

• VM Analyst: 3+ years in vulnerability management and 5+ years in analytics; skilled in dashboards and reporting (MS Excel, Co-Pilot, PowerBI).

What You'll Need:

• Bachelor's degree in Cybersecurity, Computer Science, Engineering or a related field.

• 5+ years' experience in OT/SCADA/CII, network, infrastructure administration, IT or cybersecurity operations.

• Working knowledge of ISO 27001, CIS Benchmarks, risk assessment, network security, patch and vulnerability management.

• Strong troubleshooting skills for patching, firmware upgrades and configuration changes.