Vulnerability & Risk Management Lead - IT Security

SAGL Consulting; Singapore; Hybrid; SGD 80,000 - 140,000; Full time

Job summary

SAGL Consulting in Singapore is seeking an IT Security Officer specializing in Vulnerability Management and IT Risk Management to support a hybrid on‑premises and AWS environment.

You will own the vulnerability management lifecycle, maintain the IT Risk Register, drive remediation and risk acceptance activities, and provide risk‑based recommendations to technical and business stakeholders.

The role requires hands‑on experience with leading scanning tools and strong stakeholder communications.

Qualifications

• Experience in vulnerability management and IT risk management.
• Hands-on with vulnerability scanning tools: Tenable/Nessus, Qualys or Rapid7.
• Strong understanding of CVSS and risk-based prioritization.
• Experience maintaining Risk Registers and Risk Acceptance processes.
• Coordination with SMEs for remediation tracking.

Responsibilities

• Manage end-to-end vulnerability management lifecycle across on-premises and AWS.
• Run vulnerability scans and review findings to prioritize remediation.
• Maintain IT Risk Register with owners and treatment plans.
• Coordinate Risk Acceptance for unremediated risks.
• Prepare risk management dashboards and status reports.

Skills

Vulnerability management

IT security

Risk management

Stakeholder management

AWS security

Tools

Tenable/Nessus

Qualys

Rapid7

Job description

SAGL Consulting in Singapore is seeking an IT Security Officer specializing in Vulnerability Management and IT Risk Management to support a hybrid on‑premises and AWS environment.

You will own the vulnerability management lifecycle, maintain the IT Risk Register, drive remediation and risk acceptance activities, and provide risk‑based recommendations to technical and business stakeholders.

The role requires hands‑on experience with leading scanning tools and strong stakeholder communications.