Vulnerability Management & Penetration Leadership

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

FPT Asia Pacific Pte Ltd in Singapore is seeking an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) across the organisation. The role will drive a risk-based approach to identifying, assessing, prioritising, and remediating security vulnerabilities across applications, infrastructure, and cloud environments.

The successful candidate will establish RBVM practices, collaborate with cybersecurity teams, manage external vendors, and

Qualifications

• 7+ years in information security or cybersecurity.
• Experience owning or managing vulnerability management and/or penetration testing programs.
• Experience establishing governance processes and remediation management.
• Hands-on with vulnerability management, penetration testing, and security engineering.
• Knowledge of RBVM, vulnerability triage, and risk prioritisation.
• Experience with CSPM solutions and cloud security.
• Strong communication to explain risks to technical and non-technical audiences.

Responsibilities

• Lead VMPT program governance and remediation tracking.
• Develop policies, processes, standards for vulnerability management and testing.
• Prioritise vulnerabilities based on threat exposure and business impact.
• Govern forums, report on security posture using dashboards.
• Engage with external vendors for VMPT services.
• Mentor junior security team members and maintain governance tooling.
• Ensure compliance with regulatory and organisational requirements.
• Coordinate tests across networks, apps, APIs, and cloud environments.

Skills

Vulnerability Mgmt

Penetration Testing

RBVM

Threat Modelling

OWASP

NIST SP 800-115

SIEM Integration

Security Governance

Vendor Management

CSPM

Education

Bachelor's in CS/IT/Cybersecurity

Tools

Burp Suite

Nmap

Kali Linux

Metasploit

Cobalt Strike

Python

PowerShell

Job description

FPT Asia Pacific Pte Ltd in Singapore is seeking an experienced Information Security professional to lead Vulnerability Management and Penetration Testing (VMPT) across the organisation. The role will drive a risk-based approach to identifying, assessing, prioritising, and remediating security vulnerabilities across applications, infrastructure, and cloud environments.

The successful candidate will establish RBVM practices, collaborate with cybersecurity teams, manage external vendors, and