Vulnerability & Risk Security Lead - Hybrid Cloud

SAGL CONSULTING PTE. LTD.; Singapore; Hybrid; SGD 70,000 - 110,000; Full time

Job summary

SAGL CONSULTING PTE. LTD. is seeking an IT Security Officer focused on Vulnerability Management and IT Risk Management to support a hybrid on-premises and AWS environment.

You will own the vulnerability lifecycle, maintain the IT Risk Register, drive remediation and risk acceptance, and provide risk-based recommendations to technical and business stakeholders. Responsibilities include managing scans across on-prem and AWS, prioritizing remediation, coordinating with SMEs, and producing risk

Qualifications

• 3–5+ years of experience in Vulnerability Management, IT Security or Risk Management.
• Hands-on experience with Tenable/Nessus, Qualys, Rapid7 or similar scanning tools.
• Strong understanding of CVSS and risk-based prioritization.
• Experience managing Risk Registers and Risk Acceptance processes.
• Proven ability to track remediation with SMEs and coordinate with stakeholders.
• Good understanding of on-premises security plus AWS security model.

Responsibilities

• Manage end-to-end vulnerability management lifecycle across on-premises and AWS.
• Run vulnerability scans using Tenable/Nessus, Qualys or Rapid7.
• Review findings, assess impact and prioritize remediation based on CVSS and context.
• Track remediation with infrastructure and application SMEs; escalate overdue items.
• Maintain IT Risk Register; ensure risks, owners, treatments and status are current.
• Coordinate Risk Acceptance for unreparable vulnerabilities within timeframes.
• Work with stakeholders to obtain risk acceptance approvals and reviews.
• Review vendor security advisories for applicability and impact.
• Monitor security-update compliance for AV/EDR, IDS/IPS controls.
• Prepare vulnerability and risk dashboards for management.

Skills

Vulnerability management

IT security

Risk management

Risk-based prioritization

Stakeholder management

Education

Certifications in security (e.g. Security+, CySA+, CISSP, CRISC)

Tools

Tenable/Nessus

Qualys

Rapid7

AWS Security Hub

GuardDuty

Inspector

AWS security services

Job description

SAGL CONSULTING PTE. LTD. is seeking an IT Security Officer focused on Vulnerability Management and IT Risk Management to support a hybrid on-premises and AWS environment.

You will own the vulnerability lifecycle, maintain the IT Risk Register, drive remediation and risk acceptance, and provide risk-based recommendations to technical and business stakeholders. Responsibilities include managing scans across on-prem and AWS, prioritizing remediation, coordinating with SMEs, and producing risk