Ambition Hiring! Full Time Vulnerability Management, Specialist (Financial Institution) in Federal Territory - Ricebowl

Vulnerability Management, Specialist (Financial Institution) | Kuala Lumpur

About the client?
Our client is a leading regional financial institution with a strong presence across Asia and it is going through a major digital transformation that includes cloud adoption, modernised platforms and AI-driven operations. This is a key Malaysia-based role with regional scope. You will sit within the Regional IT Security function and own vulnerability management across the Group's markets in a highly regulated environment.

The Role
You will be the key person for vulnerability management, from discovery and prioritisation through to remediation and patching. Key responsibilities include:

• Defining and maintaining the scope of the vulnerability management programme across the regional environments, including on-premise, cloud, endpoints, network devices and applications
• Driving full asset coverage and standardising scanning frequency, risk ratings and remediation SLAs across all markets
• Running vulnerability scans with tools such as Tenable, Qualys or Rapid7, and prioritising findings by risk using CVSS, EPSS, threat intelligence and asset criticality
• Overseeing regional patch management with infrastructure and endpoint teams, including monitoring patch compliance and scheduling patches through change management
• Managing the exception and risk acceptance process, and tracking penetration test, audit and regulatory findings through to closure
• Coordinating the regional response to critical and zero-day vulnerabilities
• Using AI and automation to modernise the programme. This includes AI-assisted vulnerability triage and prioritisation, automated remediation ticketing and tracking, and GenAI-driven reporting and risk summaries
• Making sure the programme complies with BNM RMiT, local regulators in each market and Group security standards

What We're Looking For
You'll bring:

• Minimum 6+ years in IT security, with at least 2 years focused on vulnerability management
• Hands-on experience with enterprise scanners such as Tenable, Qualys or Rapid7
• Strong understanding of CVSS, EPSS, CVE/CWE and risk-based prioritisation
• Hands-on knowledge of patch management processes and tools such as SCCM/MECM, Intune, WSUS or Ansible
• Experience coordinating remediation across multiple teams or countries, ideally in a regional or Group function
• Knowledge of BNM RMiT, PCI DSS, ISO 27001, the NIST CSF and ITIL change management
• Scripting skills (Python or PowerShell) for automation and reporting (an advantage)
• Strong stakeholder management, with the ability to influence technical teams and explain risk to senior leadership
• Experience applying AI and automation to security operations to triage vulnerabilities, summarise findings or generate reports, plus scripting in Python or PowerShell (an advantage)
• A Bachelor's degree in Computer Science, IT, Cybersecurity or a related field

Ready to strengthen cyber resilience across the region? Apply now.
JTK Number: JTKSM 995 | Company Registration Number: *************88 (1048918-T)