AVP, Vulnerability Management & Pen Testing

Singlife; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Singlife is a leading Singapore-based financial services company seeking an AVP to develop and run Singlife's Vulnerability Management and Penetration Testing (VMPT) program. You will support the VP to establish risk-based methodologies and govern end-to-end VMPT processes in a regulated environment.

The role requires owning triage of findings, driving remediation with stakeholders, and chairing governance forums.

Qualifications

• Minimum 7 years of relevant security experience.
• Proven experience owning vulnerability management and/or penetration testing programs.
• Ability to lead cross-functional teams and governance forums.
• Strong communication to diverse audiences.
• Experience with RBVM and threat-based risk assessment.
• Knowledge of OWASP, PTES, NIST SP 800-115, MITRE ATT&CK.
• Hands-on security engineering and tooling experience.

Responsibilities

• Build and run the internal VMPT program and capabilities.
• Develop policies and procedures for vulnerability management and testing.
• Lead triage of findings and prioritize remediation.
• Chair governance forum and manage vendor relationships.
• Report meaningful metrics and dashboards to management.
• Mentor junior VMPT staff and collaborate across the organization.
• Ensure compliance with MAS TRM and regulatory requirements.

Skills

Vulnerability management

Penetration testing

Risk management

Leadership

Communication

ITSM tools

Scripting (Python/Java)

Education

Bachelor's degree in Computer Science or Information Technology

Professional certifications (CISSP/CISM/CISA or OSCP/GPEN/GWAPT/CREST/CEH)

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Cobalt Strike

Python/Java scripting

Job description

Singlife is a leading Singapore-based financial services company seeking an AVP to develop and run Singlife's Vulnerability Management and Penetration Testing (VMPT) program. You will support the VP to establish risk-based methodologies and govern end-to-end VMPT processes in a regulated environment.

The role requires owning triage of findings, driving remediation with stakeholders, and chairing governance forums.