Lead, Cyber Exposure Specialist

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel in Singapore seeks a Lead, Cyber Exposure Specialist to drive the enterprise-wide cyber exposure management strategy, identifying and reducing exposures across on-premise, cloud, network, and identity. You will collaborate with owners, infrastructure and security teams to drive remediation, automate workflows, and deliver governance-ready reporting.

You will also lead AI-enabled exposure initiatives, develop SOPs, and ensure safety of scanning while maintaining audit trails and strong

Responsibilities

• Coordinate remediation with system owners and tech teams to meet SLAs.
• Communicate vulnerability risks clearly to technical and non-technical audiences.
• Track remediation progress against risk-based timelines.
• Escalate critical or overdue vulnerabilities to risk forums.
• Assess compensating controls and monitor risk exceptions.
• Validate remediation with re-scans and evidence trails.
• Maintain audit trails for vulnerability ID, assignment and closure.
• Develop and maintain vulnerability management procedures and standards.
• Develop and improve the cyber exposure methodology and SOPs.
• Consolidate views of vulnerabilities, misconfigurations and attack surfaces.
• Correlate exposure data from scanners, cloud platforms and threat intel.
• Assess exposures across on-prem, cloud, network and endpoints.
• Identify unknown assets and ensure asset reconciliation.
• Monitor scanning coverage and data quality gaps.
• Ensure safe scanning that does not affect production.
• Review findings for validity, severity and business impact.
• Prioritise by CVSS, exploitation, asset criticality and controls.
• Filter false positives and duplicates from results.
• Perform trend analysis to spot recurring weaknesses.
• Analyze patterns across units and platforms.
• Monitor emerging vulnerabilities and advisories.
• Provide actionable remediation recommendations.
• Produce dashboards and executive risk reports.
• Present trends to highlight systemic weaknesses.
• Conduct root-cause analysis for recurring issues.
• Recommend improvements to coverage and workflows.
• Support audits with vulnerability records and evidence.
• Maintain knowledge articles and technical standards.
• Design automated exposure ingestion and ticketing workflows.
• Integrate security tools with ITSM and CI/CD platforms.
• Automate creation of remediation tasks and changes.
• Ensure ticket data contains prioritization framework details.
• Monitor integration performance and retries.
• Explore AI-assisted analytics to improve prioritisation.
• Assess risks from AI-generated code and assets.
• Validate AI findings before operational use.
• Experience securing major cloud platforms (Azure, AWS, or GCP).
• Identify and remediate misconfigurations and over-permissions.
• Assess cloud exposure and non-compliant resources.

Job description

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part Of Something BIG!

The Lead, Cyber Exposure Specialist will be responsible for developing and operating the organization’s enterprise-wide cyber exposure management strategy. This role is responsible for identifying, analysing, prioritising and reducing cybersecurity exposures across the organisation’s technology external and internal environment (on-premise, cloud, application, endpoint, network, appliances, and identity). The role extends beyond traditional vulnerability management by correlating vulnerabilities with asset criticality, attack-path exposure, threat intelligence, active exploit activity and existing security controls.

Make an Impact by:

Remediation and Stakeholder Management:

• Work with system owners, infrastructure teams, application teams and technology vendors to support timely remediation.
• Communicate vulnerability risks and remediation requirements clearly to both technical and non-technical stakeholders.
• Track vulnerability remediation against established service-level agreements and risk-based timelines.
• Escalate critical, overdue or repeatedly recurring vulnerabilities to the appropriate management and risk forums.
• Support exception and risk-acceptance processes when vulnerabilities cannot be remediated within the required timeframe.
• Assess proposed compensating controls and monitor approved risk exceptions until remediation or expiry.
• Conduct re-scans or other validation activities to confirm that vulnerabilities have been successfully remediated.
• Maintain accurate evidence and audit trails for vulnerability identification, assignment, remediation and closure.

Cyber Exposure Management

• Develop and continuously improve the organization’s cyber exposure management methodology, processes, standards and operating procedures.
• Maintain a consolidated view of vulnerabilities, misconfigurations, external attack-surface exposures, identity weaknesses and other exploitable security conditions.
• Correlate exposure information from vulnerability scanners, cloud security platforms, endpoint tools, application security testing, penetration tests, threat intelligence and attack-surface management platforms.
• Assess exposures across:
• On-premises infrastructure and data centres.
• Public and private cloud environments.
• Network and security devices.iv. Endpoints and servers.
• Applications, APIs and containers.
• Identity and access-management platforms.
• Internet-facing systems and third-party services.
• Identify unknown, unmanaged, unscanned or incorrectly classified assets through network discovery and asset-reconciliation activities.
• Monitor authenticated or credentialed scanning coverage and resolve scanning failures, access issues and data-quality gaps.
• Ensure scanning and assessment activities are conducted safely and do not adversely affect production services.

Vulnerability Analysis and Prioritization:

• Review and analyse vulnerability findings to determine validity, severity, exploitability and potential business impact.
• Prioritise vulnerabilities using factors such as CVSS scores, known exploitation, threat intelligence, asset criticality, external exposure and compensating controls.
• Distinguish genuine security risks from false positives, duplicate findings and informational observations.
• Perform thematic and trending analysis to identify recurring vulnerabilities, common root causes, affected technologies and systemic control weaknesses.
• Analyse vulnerability patterns across business units, asset groups, technology platforms and remediation teams.
• Identify vulnerabilities that may indicate broader issues involving patching, configuration management, asset management or technology obsolescence.
• Monitor emerging vulnerabilities, actively exploited vulnerabilities and relevant vendor security advisories.
• Provide actionable recommendations for vulnerability remediation, mitigation or risk treatment.
• Participate in post-incident and lessons-learned reviews to improve exposure identification and response processes

Reporting and Continuous Improvement:

• Produce operational and executive reports covering vulnerability exposure, remediation performance, overdue items and risk trends.
• Develop dashboards and metrics such as scan coverage, credentialed scan success, vulnerability ageing, remediation SLA compliance and recurrence rates.
• Present thematic and trend analysis to highlight systemic security weaknesses and improvement opportunities.
• Conduct root-cause analysis for recurring or widespread vulnerabilities.
• Recommend improvements to scanning coverage, prioritisation models, workflows, procedures and reporting.
• Support audits, regulatory reviews and security assessments by providing vulnerability management records and evidence.
• Maintain vulnerability management procedures, technical standards, operational guides and knowledge articles.
• Evaluate exposure-management technologies and support proofs of concept, product selection and implementation

Automation and Integration

• Design and maintain automated workflows for exposure ingestion, enrichment, prioritisation, ticket creation, escalation, validation and closure.
• Integrate security platforms with ServiceNow and other enterprise ITSM, CMDB, SIEM and workflow platforms using REST APIs, JSON and webhooks.
• Automate the creation of vulnerability response items, incidents, security incidents, change requests and remediation tasks.
• Ensure automatically generated tickets contain relevant information defined by the organization’s vulnerability prioritize framework.
• Automate ticket assignment, reminders, escalations, rescan requests, status updates and closure following successful validation.
• Ensure appropriate audit trail, retry mechanisms, duplicate prevention, error handling and reconciliation controls.
• Monitor integration performance and promptly investigate failed or incomplete transactions.
• Maintain technical documentation, API mappings, integration diagrams and operational support procedures.

AI-Enabled Exposure Management

• Assess opportunities to use AI-assisted capabilities to analyze exposure data, identify attack relationships and improve prioritization.
• Monitoring how frontier AI accelerates vulnerability research, exploit development and attacker operations.
• Apply AI responsibly to support vulnerability enrichment, thematic analysis, threat correlation, remediation recommendations and reporting.
• Validate AI-generated findings and recommendations before operational use.
• Ensuring sensitive vulnerability and asset information is handled in accordance with the organization’s AI, data protection and security policies.
• Work with relevant teams to manage risks arising from AI-generated code, AI agents and machine identities.

Cloud Security Posture Management

• Experience in securing at least one major public cloud platform such as Microsoft Azure, Amazon Web Services or Google Cloud Platform.
• Ability to identify, validate, prioritize and drive remediation of cloud misconfigurations, vulnerabilities, excessive permissions, exposed services and non-compliant resources.
• Experience assessing