Position Title : Vice President – Threat Management, Vulnerability Management & SOC
Salary budget : Up to RM18K
Location : Kuala Lumpur, Malaysia
Company background : Banking
Department : Information Security / Cybersecurity
Reporting To : Chief Information Security Officer (CISO) / Head of Information Security
Employment Type : Full-time
Position Overview
The Vice President – Threat Management, Vulnerability Management, and SOC is
responsible for leading the bank's cybersecurity defense operations, overseeing the end-to-end lifecycle of threat detection, prevention, and response. This role involves managing the Security Operations Center (SOC), vulnerability management programs, and advanced threat management capabilities to safeguard the bank's systems, data, and customers.
The ideal candidate will bring strong technical leadership, regulatory awareness, and
experience in building resilient cyber defense strategies. While banking sector experience is preferred, candidates from other regulated industries with strong cybersecurity leadership backgrounds will be considered.
Key Responsibilities
Threat Management
- Lead the threat intelligence program to identify, analyze, and mitigate cyber threats targeting the bank.
- Establish processes to assess emerging threats and provide actionable intelligence to business and technology teams.
- Develop proactive measures to prevent, detect, and respond to advanced cyberattacks.
Vulnerability Management
Oversee enterprise-wide vulnerability assessment, scanning, and remediation processes.Collaborate with IT and application teams to ensure timely remediation of critical vulnerabilities.Develop a risk-based prioritization model for vulnerability patching and mitigation.Report on vulnerability trends, metrics, and compliance to senior management and regulators.Security Operations Center (SOC) Leadership
Lead the 24x7 SOC operations, including incident detection, triage, response, and recovery.Establish incident response playbooks, escalation procedures, and forensic investigation practices.Ensure SOC analysts have the tools, training, and resources to perform effectively.Drive automation and orchestration initiatives to improve SOC efficiency and reduce response times.Governance, Risk & Compliance
Ensure compliance with relevant banking and regulatory requirements (e.g., Bank Negara Malaysia guidelines, PCI DSS, ISO 27001, NIST, MAS TRM, GDPR as applicable).Act as a key point of contact with regulators, auditors, and internal stakeholders on threat and vulnerability management.Develop reporting dashboards for executives and board-level committees on security posture.Leadership & Strategy
Provide strategic direction for cybersecurity operations aligned with the bank's overall risk management framework.Build and mentor a high-performing cyber defense team.Partner with IT, Risk, Audit, and Business stakeholders to embed security into the organization's culture.Keep abreast of the latest threats, technologies, and best practices in cybersecurity.Qualifications & Experience
Education :
Bachelor's degree in Computer Science, Information Security, Engineering, or related field.Master's degree or MBA is a plus.Certifications (preferred) :
CISSP, CISM, CISAGIAC (GCIH, GCIA, GMON, GRID, or similar)CEH, OSCP, or equivalent technical certificationsCloud Security (CCSP, AWS Security Specialty, Azure Security Engineer) is an advantage.Job Types : Full-time, Permanent
Pay : RM15, RM18,000.00 per month
Benefits :
Opportunities for promotionProfessional developmentApplication Question(s) :
Total years of proven work experience leadership in cybersecurity operations (SOC, Threat & Vulnerability Management)?Total years of work experience in hands-on expertise in threat intelligence, detection, response, and prevention of cyberattacks.?Total years of work experience in enterprise-wide vulnerability assessments, scanning, and remediation?Total years of work experience & knowledge in risk-based prioritization for patching and vulnerability mitigation?Total years of work experience managing 24x7 SOC operations, incident response, triage, and forensics?Total years of work experience with automation, orchestration tools, and incident response playbooks?Total years of work experience & ability to improve SOC efficiency and reduce response times?Total years of work experience & deep understanding of regulatory requirements (Bank Negara Malaysia guidelines, PCI DSS, ISO 27001, NIST, MAS TRM, GDPR)?Total years of experience dealing with regulators, auditors, and board-level reporting?Total years of work experience & strong grasp of cybersecurity frameworks, standards, and best practices?Last drawn salary & minimum expected salary per month in MYR?Do you require Company provide you a work pass to work in Malaysia?Experience :
Banking, Financial Services, and Insurance (BFSI) : 5 years (Preferred)License / Certification :
CISSP, CISM, CISA, GIAC (GCIH, GCIA, GMON, GRID), CEH, OSCP (Preferred)Work Location : In person