Chief Vulnerability Management & Threat Visibility

Kerry Consulting; Singapore; On-site; SGD 240,000 - 380,000; Full time

Job summary

Kerry Consulting's client seeks a senior cybersecurity leader to drive enterprise Vulnerability Management, evolving to a threat-informed approach across infrastructure, apps, cloud and identity.

You will own the strategy and roadmap, oversee vulnerability scanning, penetration testing, remediation governance and reporting, and build a high-performing team with strong stakeholder engagement in a regulated environment.

Qualifications

• Extensive cybersecurity leadership experience across vulnerability management or cyber assurance.
• Proven track record maturing enterprise-scale vulnerability management programmes.
• Expertise in vulnerability management, attack surface management, penetration testing and exposure validation.
• Experience with threat intelligence, cloud security and security automation.

Responsibilities

• Own the strategy and roadmap for enterprise vulnerability management.
• Drive visibility and assessment of attack surface across cloud, on-prem, applications and identity.
• Establish risk-based prioritisation using threat intel, exploitability and business impact.
• Oversee vulnerability scanning, penetration testing, attack-path analysis and breach/attack simulations.
• Partner with technology teams to drive remediation and address root causes of exposures.
• Establish governance for vulnerability, remediation and patch-management standards.
• Develop KRIs, KPIs and management reporting to track exposure and programme effectiveness.
• Leverage automation and AI to improve discovery, prioritisation and remediation.

Skills

Vulnerability management

Threat-informed prioritisation

Attack surface management

Security automation

Penetration testing

Risk assessment

Stakeholder management

Leadership

Cloud security

Certifications

Job description

Kerry Consulting's client seeks a senior cybersecurity leader to drive enterprise Vulnerability Management, evolving to a threat-informed approach across infrastructure, apps, cloud and identity.

You will own the strategy and roadmap, oversee vulnerability scanning, penetration testing, remediation governance and reporting, and build a high-performing team with strong stakeholder engagement in a regulated environment.