Vulnerability Management Specialist

OCBC Bank; Singapore; On-site; SGD 90,000 - 140,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Job summary

OCBC Bank Singapore is seeking a Cyber Engineering - Risk professional to safeguard systems and data from cyber threats. You’ll collaborate with engineering teams to identify vulnerabilities, implement scanning schedules, and drive risk-based remediation with clear KPI dashboards.

The role requires 3–5 years' vulnerability management experience, familiarity with VA tools (Tenable, Qualys, Rapid7), and knowledge of CVSS and OWASP Top 10. A professional certification is preferred.

Qualifications

• 3–5 years hands-on vulnerability management experience.
• Strong understanding of vulnerability scoring (CVSS) and remediation strategies.
• Familiarity with OWASP Top 10 and regulatory audit readiness.
• Excellent communication to translate technical findings for stakeholders.
• Proficiency in Microsoft Office and scripting basics (Python, Bash).
• Experience with VA tools such as Tenable, Qualys, Rapid7.

Responsibilities

• Execute a comprehensive vulnerability management strategy.
• Develop and implement automated scanning schedules and risk-based prioritization.
• Analyze scan results, validate vulnerabilities, and produce actionable reports for technical and executive audiences.
• Collaborate with IT and application teams to track remediation and close high-risk findings.
• Develop dashboards and KPIs to monitor vulnerability trends and compliance posture.
• Contribute to vulnerability management process improvements and tooling.

Skills

Vulnerability management

CVSS understanding

OWASP Top 10

Regulatory compliance

Python scripting

Bash scripting

MS Office

Education

Bachelor's/Diploma in CS/Cybersecurity

Tools

Tenable

Qualys

Rapid7

Job description

WHO WE ARE

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join

Protecting our customers’ assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you’ll play a critical role in safeguarding our systems and networks from cyber threats. You’ll be part of a team that’s shaping the future of cybersecurity in the financial industry.

How you succeed

To succeed in this role, you’ll need to stay one step ahead of emerging threats. You’ll work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You’ll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.

What you do

• Execute a comprehensive vulnerability management strategy.
• Develop and implement automated scanning schedules, asset tagging, and risk-based prioritization.
• Analyze scan results, validate vulnerabilities, and generate actionable reports tailored for technical and executive stakeholders.
• Collaborate with IT and application teams to track remediation efforts and ensure timely closure of high-risk vulnerabilities.
• Drive the development of custom dashboards and KPIs to monitor vulnerability trends and compliance posture.
• Contribute to the evolution of vulnerability management processes and tooling.
• Ensure alignment with regulatory requirements (e.g., MAS TRM, BNM RMIT, HKMA guidelines) and support audit readiness.

Who you are

• Degree/Diploma in Computer Science, Cybersecurity, or related field.
• 3-5 years of hands-on experience in vulnerability management and using VA tools
• Strong understanding of vulnerability scoring systems (CVSS), exploitability, and remediation strategies.
• Familiarity with OWASP Top 10.
• Excellent communication skills with the ability to translate technical findings into business impact.
• Proven experience working with regulatory frameworks and compliance audits.
• Proficient in Microsoft Office applications
• Experience in python and Bash scripting
• Hands on experience in VA tools such as Tenable,Qualys, Rapid7.

Preferred Certifications

• CISSP
• CISM
• OSCP
• GPEN
• GWAPT

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.
• Equal opportunity.
• Fair employment.
• Selection based on ability and fit with our culture and values.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

Let’s build the bank we need for the future we want. Find the best version of yourself in a friendly, supportive team. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

About us

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.