Engineer, Threat & Vulnerability ManagementCreate your future with Affin!You too can make a difference.Join us at AFFIN, where the open minds meet and be inspired by a sharedmitment to great work.Here, you don't just stay at the forefront of the industry - you can make a difference too.KEY RESPONSIBILITIES: 1.Provide reliable and efficient IT security management and support services and ensure all IT security reported incidents, problems and issues are resolved within the agreed service level with minimal business impact, which includes escalation (if required) to the management.2.Administer research and monitor global development of threats and vulnerabilities.Promptly respond to critical threats & vulnerabilities by assessing the impact to the Bank's IT infrastructure and applications.Identify, monitor and report resolution or fixes to the threats and vulnerabilities.3.Plan and execute security posture assessment including penetration test and vulnerability assessment for all IT infrastructure and application systems.Report findings and monitor resolution of the threats and vulnerabilities.Drive prioritization and the associated coordination of remediation activities across the organization.4.Participate in strategic planning for the deployment of cyber security technologie and program enhancements.Develop and implement continuous improvement actions to address and resolve the gaps.5.Maintain strategic relationship/networking and collaborations with other Technology team and external IT security expert to benchmark and improve the Bank's IT security threat and vulnerability management.6.Monitor the administrative procedures, services by outsourced providers, nonpliance issues or other deviations to ensure that the management of Technology security posture assessment activities are aligned with Technology Service security procedures and guidelines.7.Analyze, document, andmunicate detailed reports including rmended remediation actions to cybersecurity leadership, legal, and business stakeholders.JOB REQUIREMENTS: Hands-on experience with vulnerability scanning tools or endpoint protection and having the knowledge of vulnerability management process including remediation planning.Working knowledge of information systems security standards/practices (, access control and system hardening, system audit and log file monitoring, security policies, and incident handling).A solid technical background with experience in system delivery including SDLC and vulnerability program methodologies.Ability to clearlymunicate Information Security matters to executives, auditors, end users, and engineers, using appropriate language, examples, and tone.Having an effectivemunications/reporting on Technology Security surveillance activities among stakeholders and ensure awareness on the roles and responsibilities throughout the organization.Capability to takeplex security concepts and present the ideas (and benefits) to non- technical management in an impactful qualitative and quantitative way.Job ID JR100485
