Lead, Threat Vulnerability

Lead, Threat Vulnerability

**Create your future with Affin You too can make a difference.**

Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don't just stay at the forefront of the industry - you can make a difference too.

**Responsibilities**:
1. Plan, develop, implement, maintain and continuously improve security threat & vulnerability technology, process and skills to ensure that threats & vulnerabilities detection and resolution is effective, relevant and efficient.

2. Provide reliable and efficient IT security management and support services and ensure all IT security reported incidents, problems and issues are resolved within the agreed service level with mínimal business impact, which includes escalation (if required) to the management.

5. Participate in strategic planning for the deployment of cyber security technologies and program enhancements. Develop and implement continuous improvement actions to address and resolve the gaps.

6. Maintain strategic relationship/networking and collaborations with other Technology team and external IT security expert to benchmark and improve the Bank's IT security threat and vulnerability management.

7. Monitor the administrative procedures, services by outsourced providers, non-compliance issues or other deviations to ensure that the management of Technology security posture assessment activities are aligned with Technology Service security procedures and guidelines.

8. Analyze, document, and communicate detailed reports including recommended remediation actions to cybersecurity leadership, legal, and business stakeholders.

10. Partner with Risk Management in development of organizational or business unit specific risks or exceptions tied to vulnerabilities with associated tracking and reporting to leadership.

**Job Requirements**:

- Hands-on experience with vulnerability scanning tools or endpoint protection and having the knowledge of vulnerability management process including remediation planning.
- Working knowledge of information systems security standards/practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling).
- A solid technical background with experience in system delivery including SDLC and vulnerability program methodologies.
- Ability to clearly communicate Information Security matters to executives, auditors, end users, and engineers, using appropriate language, examples, and tone.
- Having an effective communications/reporting on Technology Security surveillance activities among stakeholders and ensure awareness on the roles and responsibilities throughout the organization.
- Capability to take complex security concepts and present the ideas (and benefits) to non
- technical management in an impactful qualitative and quantitative way.

Job ID JR100460