Senior Security Operation

This position requires strong technical depth and hands-on experience in cloud security, cyber operations, and vulnerability management to strengthen security across on-premises and cloud environments.

Key objectives include:

• Own the vulnerability management lifecycle, including assessment, risk prioritization, remediation coordination, and closure validation, with hands-on experience using Tenable.
• Execute and automate security patching across platforms, address end-of-life software risks, and improve patch management processes.
• Conduct security assessments and deviation analysis based on threat intelligence, compliance requirements, and business risk.
• Work directly with infrastructure, cloud, and application teams to investigate security issues, implement controls, and resolve vulnerabilities.
• Lead security projects from planning through implementation, including automation across security patching and Identity and Access Management.
• Assess and implement secure AI and automation technologies to improve security operations and controls.

Education:

University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

Experience:

• 12 years of Tech experience with at least 8 years of experience in cyber security area in a regulated environment (e.g. bank, insurance, fintech, etc.)
• Strong knowledge of cybersecurity vulnerability management & EOL process remediation and automation, patching processes and tooling, cyber monitoring, and AI security.
• Knowledge of various source code management systems & cloud environment (such as Azure, AWS, GCP), including understanding of containers/K8s and micro-services-based architecture.
• Hands-on scripting with python/shell script/other scripting languages, dashboard visualization & API integration with Power BI & Power Automate, and
• Working experience as developers or DevOps or SRE would be an added advantage.
• Ability to drive the problem resolution of complex security issues, with strong analytical mindset based on data-driven approach.
• Experience of the implementation of a variety of security tools and documentation of the process
• Familiarity with MAS TRM guideline or similar regulatory requirements
• Excellent interpersonal and communication skill, with ability to deliver the key message of “why”, “what”, and “how” certain things are needed for remediation with elaboration of the risks, severity and impact.

Certifications/licenses:

• Preferably a holder of one or more of the following information security qualifications: GSOC , CSA, ECSA, CISSP , CEH, or similar.

Roles and Responsibilities:

Security Posture Management

• Manage end-to-end security patching lifecycle for systems and platforms, ensuring timely remediation of vulnerabilities and end-of-life (EOL) software components.
• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy patches based on risk and business impact.
• Maintain and enhance security patch management processes and documentation, ensuring alignment with best practices, policies & procedures, and compliance requirements.

Security Automation (Scripting, Orchestration, and Dashboard)

• Design, develop, and maintain / enhance security automation scripts and workflows to streamline security patching processes.
• Manage and enhance various reporting dashboards based on JIRA, Power BI, and other technology platforms.
• Ensure automation solutions are scalable, maintainable, and aligned with security policies and standards.

Security Operations Metrics

• Track and populate security operations metrics. Automate as much as possible the process of gathering, analyzing, and presenting the security operation metrics.
• To involve in the preparation of various security reports and deck.

Security Operations Initiatives

• Support the team in various security operations projects and initiatives.
• Involve in security operation automation project and provide contribution, ideas, and deliverables.

Security Deviation Management

• Review and assess security deviation and exception requests proposed by application teams, infrastructure teams, and other stakeholders, ensuring completeness, justification, and alignment with the risk appetite & regulatory requirements.
• Evaluate deviations against relevant attack path analysis, regulatory requirements, security standards, to identify potential security risks and relevant mitigation controls.