Permodalan Nasional Berhad Hiring! Full Time Associate Manager, Cyber Security Operations (Vulnerability Management) in Federal Territory - Ricebowl

Are you passionate about strengthening cyber resilience and staying ahead of emerging security risks? We are looking for an Associate Manager to support our Vulnerability Management function and help safeguard our IT environment through proactive identification, assessment and remediation of security vulnerabilities.

In this role, you will work closely with Technology teams, business stakeholders and security partners to coordinate vulnerability assessments, improve security controls and strengthen our overall cyber security posture.

What You’ll Be Doing

• Support the planning, execution and governance of Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Coordinate the identification, assessment, prioritisation, tracking and timely remediation of vulnerabilities across IT systems.
• Oversee vulnerability management tools, dashboards and reporting to improve risk prioritisation and support informed decision-making.
• Work with Technology teams, business units, vendors and security service providers on VAPT exercises, security advisory and remediation support.
• Support Red Team and Purple Team exercises, maintain security documentation and embed VAPT activities within project and system lifecycles.

What We’re Looking For

• Bachelor’s Degree in Information Technology, Computer Science or a related field.
• At least 3 years of experience in information and cyber security; exposure to vulnerability assessment and penetration testing is preferred.
• Strong knowledge of vulnerability management, cyber security practices, secure development lifecycle and IT security governance.
• Ability to interpret technical findings, assess risk and recommend practical mitigation actions.
• Strong communication and stakeholder management skills, with the ability to collaborate across teams, vendors and service providers.
• Relevant certifications such as CEH, CompTIA PenTest+, Security+, Microsoft Security, OSCP, CISA, CISM or equivalent are an advantage.