Manager, Vulnerability Remediation - Group Security

Job Posting End Date:

Worker Type:
Maximum Term/Fixed Term (Fixed Term)

ABOUT THE JOB
Manage the Vulnerability & Exposure team and drive the timely remediation of vulnerabilities, security exposures and security non-compliances across infrastructure, cloud, applications, containers and end-user environments. 
The role is accountable for reducing overdue vulnerability risk, establishing and driving sustainable remediation plans, influencing accountable technology teams, escalating barriers to delivery and improving remediation performance against approved policies, standards and service-level requirements.

YOUR RESPONSIBILITIES

- Lead and ensure delivery of the V&EM operational and strategic plan, aligned to function goals and KPIs.

- Manage and develop a direct team, with clear accountability for remediation and operational outcomes.

- Drive asset owners, application teams and technology teams to remediate vulnerabilities and security non-compliances within approved timeframes.

- Lead complex and cross-portfolio remediation campaigns, with clear owners, milestones, dependencies and target dates.

- Challenge inadequate remediation plans, unsupported delays and missed commitments; escalate barriers with evidence and recommended management actions.

- Drive sustainable reduction in overdue vulnerabilities, recurring findings and accumulated security debt.

- Ensure applications on decommissioning or replacement plans continue to remediate vulnerabilities or apply appropriate governance until exposure is removed.

- Maintain an effective governance cadence and ensure overdue populations have current, credible remediation plans.

- Apply risk-based prioritisation using severity, exploitability, exposure, asset criticality and business impact.

- Review deferrals, exceptions, false positives and compensating controls for completeness and supporting evidence.

- Drive remediation of infrastructure, cloud, application, container, end-user and externally exposed findings.

- Identify systemic control weaknesses and recurring causes; lead root-cause analysis and preventative improvement.

- Provide practical technical direction and clear reporting on risk, progress, blockers and required actions.

- Identify and deliver selected AI, automation and workflow improvements that reduce manual effort and improve remediation capacity, while maintaining validation, human oversight and auditability.

- Ensure vulnerability ownership, asset mapping, remediation status, target dates and supporting evidence are accurate.

- Oversee timely and accurate operational, management, and executive reporting.

- Ensure policies, standards, processes and controls meet regulatory and compliance expectations; manage controls, findings and treatment plans.

- Support response to emergency vulnerabilities and cyber security incidents as required.

- Stay abreast of current and emerging vulnerabilities, technologies and remediation practices.

- Other activities as required by management.

YOUR SKILLS AND EXPERIENCE

- 10+ years in cyber security, vulnerability management, security operations, technology risk or a related role

- 3+ years leading teams

- Demonstrated experience driving complex remediation outcomes across enterprise technology environments

- Experience influencing senior stakeholders and improving operational processes

Key Capabilities

- Delivery execution and people leadership
- Stakeholder engagement and influencing
- Risk management and compliance
- Vulnerability and exposure management
- Technical analysis and risk-based prioritisation
- Reporting, data interpretation, and continuous improvement
- AI and automation implementation
- Knowledge of cloud, infrastructure, application, and container security

Qualifications

- Degree in Cyber Security, Information Technology, Computer Science, or a related discipline.
- Relevant industry certifications are highly regarded.

THE BENEFITS AND PERKS

We appreciate and reward our colleagues who do great work every day – from excelling for our customers, to taking ownership of an issue to get it resolved. Here’s how we support our people with a range of exclusive benefits.

1. Generous compensation and benefit package

- Attractive salary

- 20-day paid annual leave and 7-day paid sick leave

- 13th month salary and Annual Performance Bonus

- Premium healthcare for yourself and family members

- Monthly allowance for team activities

- Premium welcome kit and occasional gifts of appreciation

- Extra benefits on your work anniversary

2. Exciting career and development opportunities

- Large scale products with modern technologies in banking domain

- Clear roadmap for career advancement in both technical and leadership pathways

- Access to digital learning platform such as Udemy

- Consistent and high-quality leadership training through the Distinctive Leadership program (DLP)

- Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers)

- Sponsored English course with native teachers

- Opportunity for training in Australia

3. Professional and engaging working environment

- Hybrid working model and excellent work-life balance

- State-of-the-art & modern Agile office

- Food and beverages in the office pantry

- Employee Assistance Program to improve your physical and mental health

- Annual team activities and company events

- A solid and talented team behind you – great people who love what they do

A DIVERSE AND INCLUSIVE WORKPLACE WORKS BETTER FOR EVERYONE

We know that our people make us who we are. That's why we have built a culture of respect – where everyone feels valued and appreciated for being their true authentic selves at NAB. With our focus on inclusion and diversity, and in partnership with our Employee Resource Groups, NAB is a place where First Nations colleagues, colleagues of all genders, sexualities and ages, carers and colleagues with disability, and colleagues from all cultures, races and religions have the opportunity to thrive, connect and grow.

We are intent on providing an environment where you can work your way. Ask about our many flexible work options and please let us know if we can provide any adjustments throughout the recruitment process.

CLOUD-FIRST

NAB is undergoing an exciting "Cloud First" technology transformation by taking advantage of the latest tools and techniques used by leading technology and digital companies globally. But it’s not just about the Tech, we are also investing heavily in our people, so if you have an appetite to learn, grow and elevate others around you, this is the place for you!

If this excites you, let's have a chat over a cup of coffee!

It's more than just a career at NAB!

We believe in people with people and dreams, and we want you to achieve your aspirations. More than just a career, NAB Vietnam offers you a flexibility to balance your work - life, the opportunity to grow as professionals, people and a complete set of well-being offerings. If you have an appetite to learn, grow and elevate others around you, this is the place for you.

IT'S MORE THAN MONEY

We naturally also provide a very competitive remuneration package but a career with us is about a lot more than money. We believe in people with ideas and dreams, and we want you to achieve your aspirations. We will work together to deliver exceptional products and outcomes that push the limits of our own aspirations. Our passion for creating value and exceeding our customers' expectations means we are constantly striving to redefine our standards of excellence. You will have our backing to develop and our encouragement to explore, realize and reach your full potential.