Kerja Sepenuh Masa, Cyber Security Consultant di Hastraa Consulting Services Federal Territory - Maukerja

Job Description:

Vulnerability Remediation & Risk Reduction:

Oversee end-to-end remediation activities, including the tracking, management, and closure of security vulnerabilities across applications, infrastructure, and supporting technologies.

Collaborate with internal stakeholders and third-party service providers to establish remediation plans, monitor progress, and ensure delivery within agreed SLAs.

Analyze vulnerability findings and engage Technology and Business teams to drive timely remediation of identified security issues.

Validate remediation effectiveness by reviewing vulnerability scan results and confirming closure of identified risks.

Provide remediation coordination and support during critical vulnerability events, zero-day exposures, and material security incidents.

Vulnerability Management & Workflow Enhancement:

Support the enhancement of SVLM workflow capabilities, including requirements gathering, prioritization, user acceptance testing (UAT), and implementation activities.

Contribute to process improvement initiatives that enhance the effectiveness, efficiency, and scalability of vulnerability management operations.

Risk Management & Stakeholder Engagement:

Consolidate remediation progress across application and infrastructure vulnerabilities into a risk-focused view to support senior management decision-making.

Manage and influence stakeholders to understand vulnerability-related risks, remediation priorities, and potential business impacts.

Provide insights and recommendations to support risk reduction strategies and remediation prioritization.

Reporting, Governance & Management Information:

Develop, maintain, and socialize Management Information (MI) packs and dashboards for senior stakeholders and governance forums.

Leverage available data sources to produce and enhance recurring weekly and monthly vulnerability management reports.

Present remediation status, key risk indicators, and emerging trends to relevant governance and risk forums.

Documentation & Continuous Improvement:

Develop and maintain documentation related to vulnerability management processes, threat assessments, remediation procedures, and operational standards.

Ensure documentation remains current, aligned to control requirements, and supports audit and regulatory expectations.