Vulnerability Management

Position: Vulnerability Management

Location: Kuala Lumpur, Malaysia

Duration: 14 Months Contract

Experience: 7+ Years

Job Description:

Primary Skills :- Vulnerability Management, Process Governance

Secondary Skills:- Good communication, patching

Cyber Security (CS) is a critical function within Standard Chartered Bank. The CS team is instrumental in ensuring the Banks ability to soundly meet its commitments to multiple internal and external stakeholders as well as to maintain an appropriate risk profile for the business we conduct. Furthermore, the CSS team plays a significant part in the Bank's 'Here for Good' vision and brand promise.

The need for this capacity has strengthened over time and is a principle concern for our regulators and the communities we operate in. Our success as a Bank is dependent on getting our Risk Management and Security capabilities right to position the Bank for success.

Key Roles & Responsibilities

• Oversee Remediation Activities such as management of tracking and remediation of vulnerabilities by leveraging agreed upon action plans and timelines with stakeholders within the Bank and where required third parties providing services to the Bank
• Prepare, socialize and manage management Information packs on key remediation activities for all key stakeholders
• Provide remediation support as part of the Bank's response to critical vulnerabilities and material security incidents
• Validate remediation by reviewing vulnerability results and providing status updates
• Analyse vulnerabilities and engage with the Technology teams and Business units to resolve identified vulnerabilities within SLAs.
• Manage and influence stakeholders in understanding risk exposure, remediation prioritisation and importance from vulnerabilities the Bank could be exposed to.
• Risk Management - Consolidate remediation progress on application and infrastructure vulnerabilities into one risk focused view to help guide senior management risk and remediation decisions.
• Develop and maintain documentation related to vulnerability management, threat assessment and remediation process.
• Leverage available data sets to deliver and enhance weekly/monthly recurring reports and present these in the relevant forums to stakeholders.
• Communicate effectively orally and in writing and establish cooperative working relationships.
• Performs other related duties as assigned.

Key Stakeholders

• VP, Security Remediation & Analytics
• VP, Remediation Management
• Head, Security Vulnerability Lifecycle Management
• Head, Vulnerability Management & Infrastructure Security
• Services Domain Heads within Cyber Security Services / Security Technology Services
• Other relevant functions with Technology Services (Infrastructure Services, Networks etc.) and Operations Risk
• CIO & Application SPOC's
• CISO
• CISRO

Qualifications & Skills

• Bachelor's degree in computer science/information technology or equivalent.
• Industry certifications will be a plus e.g. CISM, CISSP
• Vulnerability Management Tools: Experience with tools like vulnerability scanners, patch management systems, and configuration management tools.
• Familiarity with industry standards and regulations related to cybersecurity.
• Excellent written, oral communication and reporting skills
• Time management and organizational skills
• Ability and desire to learn new skills quickly
• Excellent communication, collaboration, and project management skills.
• Ability to analyze complex data and make informed decisions.
• Data reporting and normalization within ServiceNow including ITAM and CMDB

Job Type: Contract

Contract length: 14 months

Pay: RM9, RM10,000.00 per month

Work Location: In person