Key Responsibilities
Vulnerability Response Management
- Assume operational ownership of notable vulnerabilities following VA assessment and prioritisation.
- Drive end-to-end response activities for zero-day, out-of-band (OOB), actively exploited, and other high-profile vulnerabilities.
- Coordinate cross-functional stakeholders to execute mitigation and remediation activities.
- Establish and lead vulnerability response bridges, action tracking, and escalation activities.
- Drive execution of vulnerability response playbooks and response procedures
- Maintain continuous oversight of vulnerability response activities until risk mitigation or remediation is completed.
Incident Management & Stakeholder Coordination
- Leverage Incident Management processes to accelerate remediation and stakeholder mobilisation.
- Coordinate Cyber Defence, Platform Teams, Asset Owners, Technology SMEs, and Incident Management teams during vulnerability events.
- Drive stakeholder communications, executive updates, situation reporting, and escalation activities.
- Escalate critical risks, blockers, and delayed remediation activities through appropriate governance channels.
- Support post-incident reviews and continuous improvement initiatives.
Remediation Oversight
- Drive remediation activities through to closure, ensuring accountability and timely execution.
- Track remediation commitments, milestones, dependencies, and residual risks.
- Challenge and escalate overdue actions where required.
- Validate completion of agreed mitigation and remediation actions.
- Support management reporting on remediation progress and risk reduction outcomes.
24x7 Vulnerability Response Coverage
- Participate in on-call, weekend, after-hours, and follow-the-sun support arrangements.
- Provide operational coordination during high-severity vulnerability events outside standard business hours.
- Support continuous vulnerability response coverage for critical cyber threats.
- Ensure timely stakeholder mobilisation during active exploitation and major vulnerability incidents.
Key Skills & Experience
Vulnerability Management
- Strong understanding of vulnerability management concepts, CVE, CVSS, exploitability assessment, threat intelligence, and cyber risk management.
- Ability to understand vulnerability assessments and translate risk into actionable remediation plans.
- Knowledge of vulnerability prioritisation, attack surface exposure, and threat landscape trends.
Incident & Crisis Management
- Experience coordinating Major Incident, Cyber Incident, or Technology Incident response activities.
- Strong understanding of escalation management, crisis communications, and stakeholder coordination.
- Experience leading bridge calls, action tracking, executive reporting, and operational response activities
Remediation Governance & Oversight
Pay: RM10,000.00 - RM12,000.00 per hour
Work Location: In person