Manager, Threat & Vulnerability Management

Location: Kuala Lumpur (Group Head Office)

Time Type: Full time

Job Description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Role and Responsibilities

• Identify security risks, threats and vulnerabilities of Cloud and On-Prem infrastructure, network, system, applications and related components

• To work with Security Metrics team to ensure Vulnerability Management and Compliance reporting is accurate with minimal false positives

• To provide timely and actionable threat insights to relevant teams to drive rapid remediation or control reassurance actions against the latest emerging threats.

• To develop and maintain related procedures and processes documentation

• To work closely with Regional Business teams to drive remediation activities and ensure risk mitigation, work closely with the patching team to drive remediation of vulnerabilities to meet the required SLAs

Qualifications

• 5 years technical experience in Vulnerability Management including and not limited to asset management, vulnerability tools such as Qualys, tenable with focus on security baseline development and compliance.

• Experience with common cybersecurity frameworks and standards such as NIST, ISO/IEC 27001, and CIS Controls.

• Experience in administration of baseline configuration scanning tools (Qualys, Nessus)

• Programming skills i.e. python.

• IT Security Operations Management experience would be an advantage

• Degree in Computer Science, Information Technology or Information Systems

• Security certifications CompTIA Security+, CEH, CISSP, CISM, CISA..etc would be added value.

Mandatory skills

•  Define, implement and manage security baseline configurations

• Experience in Vulnerability Management tools - Minimum 2 years of hands-on experience and knowledge on VM tools such as QualysGuard, Nessus

• Knowledge security vulnerabilities and security baseline configuration.

• Basic programming and knowledge such as python, API, macros in excel… etc. Knowing any of the above or additional scripting languages would be considered as added value.

• PowerBI fundamentals, basic DAX (Data Analysis Expressions), data connectivity, excel proficiency.

• Mandatory Language Skill: Good written and spoken communication in English

• Attitude: Problem-solving mindset with intellectual curiosity, critical thinking and proactive solutions. 

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.