Responsibilities:
- Manage the end-to-end Vulnerability Management lifecycle (scan, assess, prioritise, remediate, report)
- Configure and maintain vulnerability scanning tools (e.g. **Tenable Security Center / Nessus)
- Ensure scheduled scans are executed , investigate failures, and re-run where required
- Perform asset discovery and onboarding into vulnerability management tools
- Conduct risk-based vulnerability assessments and prioritise remediation actions
- Work closely with Infrastructure, Network, and Application teams to drive remediation
- Manage false positives and risk acceptance , including stakeholder coordination
- Maintain dashboards and reporting for technical teams and management
- Support penetration testing remediation tracking
- Monitor emerging threats and conduct ad-hoc exposure assessments
- Drive process improvements and ensure compliance with internal security policies
- Prepare regular security reports (weekly / monthly / ad-hoc)
Requirements:
- Bachelor's Degree in Computer Science, IT, or related field
- 5 to 8 years of IT experience, including at least 3 to 5 years in IT Security / Vulnerability Management
- Hands-on experience with Tenable Security Center or similar tools (e.g. Nessus, Qualys)
- Strong understanding of Operating Systems (Windows, Linux), Networks and basic application security concepts
- Experience working in operations / production environments
- Ability to perform risk assessment and prioritisation
- Familiar with ITIL processes
- Good reporting and documentation skills (Excel, PowerPoint; Power BI is a plus)
- Strong communication and stakeholder management skills
- Able to work independently in a fast-paced, shift-based environment
Good to Have:
- Certifications such as Certified Information Systems Security Professional (CISSP), GIAC Enterprise Vulnerability Assessor (GEVA)
- Exposure to financial services / banking environment
- Basic scripting knowledge (PowerShell, Bash)
- Experience with dashboards (e.g. Power BI)
Additional info:
- This role is offered on a yearly renewable contract basis.
- Able to support rotational shift scheduled based on duty roaster (Europe and/or Asia time zone).
- Able to provide on-call support during non-business hours/and or on weekends.
To learn more about this opportunity, please contact Yingying at yingying.lai@gmprecruit.com
We regret that only shortlisted candidates will be notified.
GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239