Exposure Manager
On-siteSingapore, Singapore
Job Summary
Coordinate multiple penetration testing engagements from initiation through remediation tracking, defining objectives and timelines with application owners. Organize scoping sessions to align business needs with security best practices while overseeing external vendors on deliverables and adherence. Act as the central point for exposure management escalations, liaising with internal teams and senior security specialists to validate scopes and clarify findings. Provide process support to technology teams, report adherence to management, and ensure timely resolution of infrastructure vulnerabilities tracked in ServiceNow. Manage pre-engagement logistics including access provisioning and environment setup while maintaining international standards and regulatory compliance.
Required Qualifications
- Bachelor's degree in computer science, information security, or equivalent practical experience
- 3–5 years of experience in IT/security governance, compliance, or vulnerability management, or technical project management
- Professional proficiency in English
- Foundational understanding of security configuration standards (e.g., OWASP Top 10, CIS benchmarks) and vulnerability management principles
- Familiarity with penetration testing phases and methodologies
- Experience using ServiceNow or similar ITSM/GRC platforms
- Demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations
Desired Qualifications
- Experience coordinating penetration testing or security assessment projects
- Familiarity with vulnerability scanning tools (e.g., Nexpose) and exposure management workflows
- Experience working with external vendors
- IT or Security certifications (e.g., Security+, CISM, CISSP, CEH, OSCP)
- Basic understanding of infrastructure security concepts
- Experience in financial services or regulated environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.