Manager, Information Security (Vulnerability Management & Penetration Testing)

Singlife; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

Singlife is looking for a skilled Vulnerability Management & Penetration Testing Lead to oversee the development and management of its internal program. You will be responsible for identifying and managing vulnerabilities while leading a team to ensure the security and integrity of our IT operations.

The ideal candidate will have over 7 years of relevant experience, a strong background in risk-based methodologies, and leadership abilities to mentor junior staff. This role is based in Singapore.

Qualifications

• 7+ years of relevant experience in information security.
• Strong knowledge in risk-based vulnerability management.
• Ability to lead teams and drive projects across departments.

Responsibilities

• Build and manage the Vulnerability Management & Penetration Testing program.
• Develop policies and procedures for vulnerability management.
• Lead the identification and management of vulnerabilities.

Skills

Risk-based vulnerability management

Team leadership

Communication with diverse audiences

Process optimization

Cybersecurity knowledge

Incident handling

Programming (Python, C++, Java, etc.)

Education

Bachelor’s degree in Computer Science / Information Technology

Professional certifications (SANS, CISA, etc.)

Tools

Qualys

Prisma Cloud

ITSM tools

SIEM platforms

Job description

Purpose

The Vulnerability Management & Penetration Testing Lead is responsible for developing & running Singlife internal Vulnerability Management & Penetration Testing program and capabilities to support Singlife business, security & integrity of the IT operations. She/He will lead and manage a team to identify & employ risk-based vulnerability management methodologies, developing standards & procedures for a distributed environment and to champion program improvements that meet the needs of business & security requirements.

Responsibilities

• Build internal Vulnerability Management & Penetration Testing (VMPT) program & capabilities within the organization.
• Develop and refine policies, processes & procedures for vulnerability management, penetration testing, communication and reporting.
• Manage internal VMPT program and relationships with external VMPT vendors and other external stakeholders in Singlife.
• Build & lead security review & monitoring of production environments in hybrid infrastructure.
• Lead identification of gaps in RBVM processes & procedures and drive improvements.
• Lead identification of gaps in adjacent processes & procedures and drive improvements from a RBVM perspective.
• Lead triage and management of vulnerabilities effectively and efficiently together with other internal teams.
• Produce quality oral & written work products, presenting complex technical matters & findings clearly & concisely.
• Consult with and take direction from supervisors and other cybersecurity team members regarding vulnerability management and penetration testing status and findings.
• Mentor and guide technical development of more junior VMPT staff and colleagues.
• Research, develop & recommend hardware and software tooling required for effective risk-based vulnerability management.
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability.
• Ensure compliance with all applicable laws and regulations relating to the above functional activities.
• Operation for compliance with governance against security baseline with tool.

Experience

• Preferable to have 7+ years of relevant experience.
• Strong knowledge in risk-based vulnerability management.
• Demonstrated ability to lead, with project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments.
• Experience and ability to identify risks associated with business processes, operations, information security programs and technology projects.
• Able to communicate with diverse audiences, both technical and non-technical, to achieve consensus with regards to risk-based vulnerability management.
• Experience with optimization of processes.
• Experience with automation of processes and process workflow using ITSM tools.
• Experience in log configuration, formats and feeding of logs into SIEM platforms.
• Experience in intrusion analysis and incident handling.
• Working experience with vulnerability management and security engineering in a high tempo SOC or Cyber Fusion Centre Environment.
• Leadership experience in a high tempo SOC or Cyber Fusion Centre Environment.
• Good track record in leading and mentoring a team.
• Some knowledge in programming in the use of Python, C++, Java, Ruby, Node, Go and/or PowerShell.
• Have experience with Qualys/Prisma Cloud.

Education

• Academic: Bachelor’s degree in Computer Science / Information Technology (preferred).
• Professional Certification(s): SANS, CISA, CISM, CISSP, Vendor Certifications (preferred / willing to get certified in 1 year).