Senior Vulnerability Management Lead: Risk & Remediation

Income Insurance Limited; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Income Insurance Limited is seeking a senior security professional to lead vulnerability management operations, ensure asset coverage, and mature the DAST testing programme across technology assets. The role includes coordinating external testing, remediation tracking, and governance reporting.

You will guide risk prioritisation, perform risk assessments, and collaborate with threat intel and security teams to address evolving threats and regulatory requirements.

Qualifications

• 5+ years in IT / information security, with vulnerability management leadership.
• Diploma or degree in Computer Science, Cybersecurity or related field.
• Certifications such as CISSP, CISM, OSCP, GPEN, GWAPT, GWEB, CEH or cloud security credentials are a plus.

Responsibilities

• Lead BAU vulnerability management operations, including scanning, findings triage, remediation SLA tracking, closure follow-up and periodic reporting.
• Oversee asset coverage and inventory alignment to ensure vulnerability management activities are applied consistently across technology assets.
• Drive maturation of the DAST testing programme, including onboarding of applications, scan configuration, troubleshooting, authenticated scanning, testing cadence and control improvements.
• Manage bug bounty and controlled external testing activities, including report review, severity validation and remediation tracking.
• Coordinate annual and ad-hoc penetration testing engagements with internal stakeholders and external vendors.
• Oversee configuration compliance activities, including secure configuration reviews, compliance tracking and follow-up with stakeholders.
• Perform vulnerability risk assessments considering CVSS, asset exposure, threat intelligence and mitigations.
• Develop risk prioritisation and severity re-classification approaches to focus remediation on the most exploitable exposures.
• Produce vulnerability statistics and dashboards for management reporting.
• Escalate high-risk vulnerabilities to relevant stakeholders where remediation progress is not aligned with timelines.
• Support audit and regulatory compliance expectations (MAS TRM and Cyber Hygiene) with evidence of assessments and decisions.
• Collaborate with threat intelligence and other security teams to act on trends affecting the environment.

Skills

Vulnerability lifecycle

Stakeholder mgmt

Mentoring teammates

Scripting & automation

Risk-based prioritisation

Threat intel collaboration

Education

Diploma/Degree in Computer Science or Cybersecurity

Tools

Vulnerability management platforms

Application security testing tools

Job description

Income Insurance Limited is seeking a senior security professional to lead vulnerability management operations, ensure asset coverage, and mature the DAST testing programme across technology assets. The role includes coordinating external testing, remediation tracking, and governance reporting.

You will guide risk prioritisation, perform risk assessments, and collaborate with threat intel and security teams to address evolving threats and regulatory requirements.