Senior Vulnerability & Penetration Testing Lead

FPT Asia Pacific; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

FPT Asia Pacific seeks an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) across the organisation, covering applications, infrastructure, and cloud.

The role focuses on program governance, end-to-end vulnerability management, and testing, driving risk-based remediation and clear reporting to stakeholders. You will mentor teammates and coordinate with vendors to strengthen security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline is preferred.
• Professional certifications such as CISSP, CISM, CISA, or SANS/GIAC certifications are preferred.
• Penetration testing certifications such as OSCP, GPEN, GWAPT, CREST CRT/CCT, or CEH are preferred.

Responsibilities

• Build, manage, and continuously improve the Vulnerability Management and Penetration Testing (VMPT) program and capabilities.
• Develop and enhance policies, processes, standards, and procedures covering vulnerability management, penetration testing, communication, and reporting.
• Lead the triage and prioritisation of vulnerabilities and penetration testing findings based on threat exposure, compensating controls, business impact, and overall risk.
• Lead vulnerability and penetration testing governance forums, driving accountability and tracking remediation against defined SLAs.
• Escalate overdue, critical, or high-risk security findings to relevant stakeholders and management.
• Manage relationships with external vulnerability management and penetration testing vendors.
• Establish meaningful metrics and dashboards covering security posture, remediation progress, outstanding risks, and overall program effectiveness.
• Identify gaps in security processes and drive improvements using Risk-Based Vulnerability Management (RBVM) principles.
• Research, evaluate, and recommend appropriate vulnerability management and penetration testing tools.
• Produce clear technical reports and communicate complex security findings to both technical and non-technical stakeholders.
• Collaborate with cybersecurity teams and stakeholders on vulnerability management, penetration testing, and broader security initiatives.
• Mentor and provide technical guidance to junior security team members.
• Maintain security baseline governance using appropriate security tooling.
• Ensure security activities comply with applicable regulatory and organisational requirements.

Skills

Vulnerability management

Penetration testing

RBVM

Security governance

Threat modelling

Vendor management

Team leadership

Communication

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Cobalt Strike

Job description

FPT Asia Pacific seeks an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) across the organisation, covering applications, infrastructure, and cloud.

The role focuses on program governance, end-to-end vulnerability management, and testing, driving risk-based remediation and clear reporting to stakeholders. You will mentor teammates and coordinate with vendors to strengthen security posture.