RBVM-Driven Vulnerability & Penetration Lead

fpt asia pacific pte. ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Unknown organization is seeking an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) activities across the organisation. The role covers program management, end-to-end vulnerability management, and penetration testing in applications, infrastructure, and cloud environments.

The candidate will drive risk-based approaches to identify, assess, prioritise, and remediate security vulnerabilities, while collaborating with cybersecurity teams

Qualifications

• Minimum 7 years of relevant information security or cybersecurity experience.
• Proven experience owning or managing vulnerability management and/or penetration testing programs.
• Strong experience establishing security governance processes and managing remediation activities.
• Strong hands-on experience with vulnerability management, penetration testing, and security engineering.
• Strong knowledge of RBVM, including vulnerability triage and risk prioritisation.
• Experience with CSPM solutions and cloud environments.

Responsibilities

• Build, manage, and continuously improve the VMPT program and capabilities.
• Develop and enhance policies, processes, standards, and procedures covering VMPT.
• Lead triage and prioritisation of vulnerabilities and testing findings.
• Lead governance forums and track remediation against SLAs.
• Manage relationships with external VMPT vendors.
• Establish metrics and dashboards on security posture and remediation progress.
• Identify gaps and drive RBVM-based improvements.
• Produce clear technical reports for stakeholders.
• Mentor junior security team members.

Skills

RBVM

Vulnerability mgmt

Penetration testing

Security governance

Risk assessment

Threat modeling

Stakeholder mgmt

Leadership

Scripting

Cloud security

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Cobalt Strike

Job description

Unknown organization is seeking an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) activities across the organisation. The role covers program management, end-to-end vulnerability management, and penetration testing in applications, infrastructure, and cloud environments.

The candidate will drive risk-based approaches to identify, assess, prioritise, and remediate security vulnerabilities, while collaborating with cybersecurity teams