Title: Asst Manager, Threat & Exposure Management (2 Years Contract)

Job ID: 22308

Location:

ST Engineering Hub, SG

Description

Key Job Accountabilities:

Threat & Exposure Management

Continuously monitor and assess cyber threats, vulnerabilities, and attack surfaces.
Aggregate findings from vulnerability scans, threat intelligence, penetration tests, and red teaming.
Identify critical exposures and prioritise based on business risk and impact.
Manage takedown services with external providers.
Threat Intelligence Integration

Leverage internal and external threat intelligence sources.
Map threats to organisational assets and vulnerabilities.
Track emerging threats, zero-days, and active campaigns.
Vulnerability Management

Coordinate vulnerability scanning activities and ensure coverage.
Validate scan results and eliminate false positives.
Work with Group IT/International Business Units teams to remediate vulnerabilities.
Attack Surface Management

Identify and monitor internal and external attack surfaces.
Discover shadow IT, exposed assets, and misconfigurations.
Ensure external-facing assets are secured and continuously assessed.
Use AI-driven agents to safely simulate and validate exploitability of exposures (AEV) in production-like environments
Continuously identify and validate attack paths, privilege escalation, and lateral movement risks. Correlate simulation results into actionable risk insights with proven exploitability.
Collaboration & Stakeholder Engagement

Work closely with SOC, Incident Response, Group IT and International Business Units and regional business partners to carry out monitoring of systems for security anomalies and detection of breaches.
Advise system owners on remediation and risk mitigation strategies.
Support security governance and audit requirements.
Incident Response Management

Conduct quarterly Cybersecurity Table-top exercises with line of business.
Conduct annual Group wide cybersecurity drill.

Required Experience And Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related fields.
3-5 years of experience as a technical lead in information security field with proven track record of execution in ensuring the desired outcomes are tied to business needs.
Strong experience in IT Operations, developing architectural artifacts including reference architectures, roadmaps, architectural principles, technology standards, security non-functional requirements, architectural decisions and design patterns.
Possess strong analytical, problem solving and decision-making skills in a fast paced and dynamic environment.
Knowledge in Network, Web Security and Application Security would be highly valued
Ability to establish and manage effective working relationships in a matrix environment with other departments, groups and staff with whom work must be coordinated or interfaced.
Exhibit excellent interpersonal skills among team members and other stakeholders with strong written and oral communication skills.
Possession of one or more industry-recognised cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC) is an added advantage.
Experience with Agentic Exposure Simulation (AES) / Agentic Exposure Validation (AEV) platforms or similar continuous security validation technologies is highly desirable