Vulnerability Management Expert

Role Overview

We are seeking an experienced Vulnerability Management Expert to join our team in Singapore. The ideal candidate will have extensive expertise in IT security, particularly in vulnerability management processes within large-scale enterprise environments.

Key Responsibilities

• Manage and oversee the vulnerability management process, ensuring systematic identification and remediation of security weaknesses.
• Conduct thorough vulnerability assessments across diverse platforms including operating systems, networks, databases, and application servers.
• Prioritize remediation efforts based on risk assessments and collaborate effectively with cross-functional IT operations teams.
• Administer and operate Tenable (Nessus) Security Center for enterprise-level vulnerability management.
• Design, develop, and present detailed vulnerability reports tailored to different organizational levels.
• Use various tools such as Excel, PowerPoint, and Word to create graphical and trend-based reports.
• Leverage BI tools like Power BI to build dashboards supporting vulnerability monitoring and reporting.

Required Qualifications and Skills

• Bachelor’s or Master’s degree in Information Technology, Computer Science, or equivalent technical field.
• 10-12 years of IT experience including 6-8 years in information security and over 5 years managing enterprise vulnerability management.
• Professional certifications strongly preferred, including CISSP, GIAC Enterprise Vulnerability Assessor (GEVA), CREST, or similar credentials.
• Proficient technical knowledge for assessing vulnerabilities across multiple platforms and ability to apply a risk-based approach.
• Hands-on experience with Tenable (Nessus) Security Center tool administration.
• Competency in Powershell and SQL querying.
• Experience with business intelligence tools such as Power BI for dashboard creation.
• Background in financial organizations is a significant advantage.
• Excellent analytical, communication, and documentation capabilities.