Info Sec - Vulnerability Manager

We are seeking a dynamic professional who can seamlessly blend cybersecurity expertise with data-driven insights to strengthen AIA’s vulnerability management process. This role demands a proactive individual who can assess and manage vulnerabilities across our technology landscape, while also driving data analysis, visualization, and process automation to enhance decision-making and operational efficiency.

Vulnerability Management:

· Collaborate with Product and Technology teams to identify, assess, and track vulnerabilities across AIA’s assets, applications, and networks.

· Prioritize vulnerabilities using intelligence feeds, CVE research, and risk assessments based on CVSS scores, asset criticality, and threat context.

· Effectively drive vulnerability remediations and mitigations across AIA’s business units, especially for critical/high and zero-day vulnerabilities.

· Guide AIA's business units to prioritize and remediate vulnerabilities within SLA, or implement compensate controls.

· Explore and research on industry leading vulnerability management tools, best practices to improve overall efficiency of daily operations.

· Govern AIA's business units vulnerability trend, highlight potential gaps, initiate improvement with key stakeholders and cross-silo teams.

· Establish and uplift vulnerability management SOPs continuously from day-to-day operations.[QW1]

Data Analysis, Visualization & Automation

· Apply statistical techniques to uncover insights, trends, and patterns in vulnerability and remediation data.

· Design KPIs, validate data accuracy, and build interactive dashboards using Power BI, Tableau, or similar tools.

· Automate reporting and integrate with platforms like ServiceNow to streamline workflows and reduce manual effort.

Process & Stakeholder Management

· Understand business context, frame problems effectively, and identify relevant data sources and stakeholders.

· Communicate findings clearly, manage stakeholder expectations, and align technical insights with business objectives.

The role would not be required to deal with any financial measure.

Timeliness, with ability to balance delivery speed and work quality is expected.

Excellent verbal and written communication skills, fluent in English.

Self-learner with demonstrated ability of understanding and keeping up to date with latest technology.

Attention to detail and ability to report on key activities and status

Familiarity with enterprise controls, related tools and its limitations.

A team player, with ability to work independently if tasked to do so on certain situations.

Expertise in end-to-end vulnerability management, encompassing hands-on experience with industry-standard scanning tools, in-depth knowledge of CVE databases and threat intelligence platforms, and the ability to perform comprehensive risk assessments using CVSS scoring, asset criticality, and established security frameworks such as CIS, OWASP, and SANS.

Advanced proficiency in Python and automation scripting, with practical experience in developing scalable solutions using frameworks like Django or Flask, integrating REST APIs for data extraction and processing, and applying software development best practices to build maintainable, high-quality code for workflow automation and security operations.

Strong analytical and data visualization capabilities, demonstrated through the ability to manage and interpret large datasets, apply statistical techniques for trend and risk analysis, design meaningful KPIs, and develop interactive dashboards using tools such as Power BI or Tableau to deliver actionable insights that support strategic security decision-making.

· Degree in Computer Science, Information Security or a related discipline.

· 5+ years of experience in cyber security, with familiarity data analysis.

· Preferably certified in Information Security (e.g., CISSP, CEH, CompTIA Security+, SSCP, ISACA Cybersecurity Fundamentals).

· Experience working in enterprise environments with large-scale vulnerability data.

Be part of AIA Philippines's Technology Hub, the AIA Digital+ Philippines.

We are a brand that captures AIA’s Group-led Technology, Digital and Analytics hubs dedicated to powering AIA to be more efficient, connected and innovative as it fulfils its Purpose to help millions of people across Asia-Pacific live Healthier, Longer, Better Lives.

Launched in Mainland China, Malaysia and the Philippines, AIA Digital+ is bringing together top Technology, Digital and Analytics talent to accelerate AIA’s transformation and secure our position as the technology leader in the insurance industry.

At AIA and AIA Digital+, we strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to cultivate an inclusive work environment that accepts the strength of heritage and individuals.

JOIN US NOW! Be part of the Industry's certified GREAT PLACE TO WORK for and enjoy these comprehensive benefit package upon hire and upon regularization;

✅ HMO with free 4 dependents (upon hire for Principal and upon regularization for the eligible dependents)

✅ 15 days VL and 15 days SL (Pro-rated for mid-year hire)

✅ Guaranteed 14th-month pay

✅ Annual Targeted Incentive (Performance Bonus)

✅ Group Life Insurance

✅ Protection benefits, and a lot more w/c will be discussed during the job offer stage

#AIAPhilippines #AIADigital+PH #AIAITPH #EmpowerYourCareer

#HealthierLongerBetterLives #EqualOpportunities