Deputy Manager/Manager (Security Vulnerability Management)

We are the World's Port of Call. Our winning formula is our People.

In our continuing journey to build great teams, we are looking for passionate individuals driven by a strong sense of purpose. It is only with the determination and commitment of our People that we can serve our customers, lead our industry and contribute to our nation to create new possibilities.

Working Alongside, we can deliver extraordinary results together! Join #TeamPSA today!

Deputy Manager/Manager (Security Vulnerability Management)

Apply now Job no: 493655
Work type: Permanent
Categories: Infocomm Technology

You will be responsible for overseeing the enterprise-wide vulnerability management lifecycle, including identifying, assessing, prioritizing, and driving the remediation of security vulnerabilities across systems, applications, and infrastructure to reduce cyber risk exposure. This role requires strong technical skills, cross-functional coordination, and experience with vulnerability management tools and risk frameworks.

You will manage regular scans, penetration tests, and asset inventory mapping, ensuring full coverage and alignment with the organization’s risk tolerance and compliance requirements. You'll analyze and prioritize vulnerabilities using CVSS scores, exploitability, and asset criticality, while coordinating remediation efforts with IT and engineering teams. In addition, you will oversee tools such as Tenable and ensure integration with SIEMs, CMDBs, and ticketing systems. You’ll deliver key metrics and dashboards to senior management, support audits, define patch ownership across teams, and lead or guide the vulnerability management function. You will also participate in incident response, working with threat intelligence and red teams to address high-risk vulnerabilities.

Requirements

1. Bachelor’s degree in Cybersecurity, Computer Science, or a related field
2. At least 5+ years of experience in cybersecurity, with 2+ years focused on vulnerability management
3. Strong knowledge of vulnerability scanning tools and security frameworks (CVSS, MITRE ATT&CK, NIST)
4. Understanding of operating systems (Windows, Linux), networks, web applications, and cloud environments
5. Experience managing cross-functional remediation projects
6. Preferably with the following certifications - CISSP, CISM, OSCP, CEH, or similar
7. ITIL and PMP certifications for project and process management
8. Excellent communication and stakeholder engagement skills
9. Strong analytical thinking and problem-solving ability
10. Proven experience in managing multiple priorities and delivering under pressure

Only shortlisted candidates will be notified.

Advertised: 22 Apr 2025
Applications close: 31 Oct 2025