Job Description

Responsibilities:

• Own and manage the Vulnerability Management process across enterprise systems
• Serve as primary advisor on vulnerability findings and remediation strategies
• Plan and execute the full lifecycle (scan, assess, remediate, report)
• Ensure vulnerability scans are configured, scheduled, and executed properly
• Perform risk assessment & prioritisation based on business impact
• Collaborate with Infrastructure & Application teams to drive remediation efforts
• Manage false positives and risk acceptance processes with stakeholders
• Maintain dashboards and reports for both technical and management audiences
• Track and ensure compliance with KPIs and security standards
• Lead penetration testing remediation planning
• Conduct threat exposure analysis and recommend mitigation actions
• Drive continuous service improvement initiatives
• Ensure compliance with security, regulatory, and internal policies

Requirements:

• Degree in Computer Science / IT / Engineering or equivalent
• Professional certifications preferred: CISSP, GIAC (GEVA) or equivalent, CREST
• Minimum 10 to 12 years of IT experience, including 6 to 8 years in IT Security and at least 5 years in enterprise-level Vulnerability Management
• Familiar with ITIL processes
• Technical Skills:
• Hands-on experience with Vulnerability Management tools (e.g. Tenable / Nessus)
• Strong knowledge of vulnerability assessment and remediation
• Strong understanding of operating systems (Windows, Linux/Unix)
• Good knowledge of network and application security
• Ability to assess vulnerabilities and prioritise remediation using a risk-based approach
• Scripting knowledge in PowerShell or SQL
• Experience in reporting and dashboarding (Excel, PowerPoint, Power BI or similar)
• Nice to Have:
• Experience in financial services environment
• Exposure to penetration testing & threat assessment

Work Schedule:

• Standard hours: 10AM – 7PM OR 11AM – 8PM (SGT)
• Shift rotation (as required): 12PM – 9PM (SGT)
• May require after-hours support for critical incidents

To apply, please visit www.gmprecruit.com and search for Job Reference: 4R8VX367

To learn more about this opportunity, please contact Yingying at yingying.lai@gmprecruit.com

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239