Threat-Informed Vulnerability Strategy Leader

Kerry Consulting; Singapore; On-site; SGD 180,000 - 320,000; Full time

Job summary

Kerry Consulting is seeking a senior cybersecurity leader to drive enterprise vulnerability management, evolving it toward a threat-informed approach across cloud, on-premises, applications and identity. This role leads strategy, governance, and a high-performing team to reduce exposure and strengthen controls.

The ideal candidate has extensive leadership experience in vulnerability management, threat intelligence, and security automation within regulated environments, with a proven track record

Qualifications

• Senior leadership experience across vulnerability management or security assurance.
• Experience building or maturing an enterprise-scale vulnerability management programme.
• Strong expertise in vulnerability management, attack surface management, penetration testing and exposure validation.

Responsibilities

• Own the strategy and roadmap for enterprise vulnerability management.
• Drive continuous visibility of attack surface across cloud, on-prem, apps and identity.
• Establish risk-based prioritisation using threat intel, exploitability, asset criticality and business impact.
• Oversee vulnerability scanning, penetration testing, attack-path analysis and breach simulations.
• Partner with tech teams to drive remediation and address root causes.
• Establish vulnerability, remediation and patch-management standards and governance.
• Develop KRIs, KPIs and management reporting on exposure and programme effectiveness.
• Leverage automation, analytics and AI to improve discovery and prioritisation.
• Partner with Technology Risk and Audit on assurance and control matters.
• Build and lead a high-performing team.

Skills

Senior leadership

Vulnerability management

Threat-informed prioritisation

Cloud security

Security automation

Stakeholder management

Job description

Kerry Consulting is seeking a senior cybersecurity leader to drive enterprise vulnerability management, evolving it toward a threat-informed approach across cloud, on-premises, applications and identity. This role leads strategy, governance, and a high-performing team to reduce exposure and strengthen controls.

The ideal candidate has extensive leadership experience in vulnerability management, threat intelligence, and security automation within regulated environments, with a proven track record