VP, Application Security Testing & AVA/AVM Strategy

VulnU; Singapore; On-site; SGD 180,000 - 320,000; Full time

Benefits offered by this job

Paid parental leave

Home-office stipend

Equity

Job summary

The Info Security Ops Group Manager at Citi Singapore is a senior leadership role responsible for strategic direction and operational oversight of application vulnerability assessment and management services.

You will lead a team of security professionals, partner with business and tech stakeholders, and ensure delivery of high-quality AVA/AVM solutions while aligning with cybersecurity standards and regulatory requirements.

Qualifications

• 10 years of experience in application security, vulnerability assessment, and related areas.
• Experience leading cybersecurity teams and large-scale security operations.
• Strong knowledge of testing methodologies, vulnerability management, and secure SDLC.
• Cloud security, DevSecOps, and modern application architectures knowledge.

Responsibilities

• Provide strategic leadership for AVA/AVM and perimeter testing programs.
• Oversee day-to-day AVA/AVM operations and ensure service continuity.
• Monitor KPIs, quality metrics, and remediation tracking.
• Lead, mentor, and develop cybersecurity professionals in the team.
• Communicate risk insights and remediation priorities to senior leadership.

Skills

Application security

Vulnerability assessment

Vulnerability management

Penetration testing

Cybersecurity

Stakeholder management

Cloud security

DevSecOps

Security governance

Regulatory compliance

Education

Bachelor’s degree or equivalent

CISSP

CISM

GWAPT

GPEN

OSCP

Job description

The Info Security Ops Group Manager at Citi Singapore is a senior leadership role responsible for strategic direction and operational oversight of application vulnerability assessment and management services.

You will lead a team of security professionals, partner with business and tech stakeholders, and ensure delivery of high-quality AVA/AVM solutions while aligning with cybersecurity standards and regulatory requirements.