Our teams are innovative, hands-on and collaborative. The power to share and collaborate requires respect, integrity and teamwork. 

United through teamwork

Our company is rooted in a rich heritage but to look to the future, we need new energy and perspectives.

Open and collaborative culture

We are here to help our employees expand their skills and expertise in various areas.

Connect, Grow, Succeed

Prudential plc

Prudential Assurance Malaysia Berhad (PAMB) is a leading and innovative insurance company in Malaysia, serving the savings, protection and investment needs of Malaysians by offering a full range of financial solutions through its branches, agency force and bancassurance distribution partners network nationwide. 
Our purpose For Every Life, For Every Future is to provide simple and accessible financial and health solutions to every generation.
PAMB was established in Malaysia in 1924 and is a subsidiary of Prudential plc, which was founded in London in 1848. Prudential plc provides life and health insurance and asset management, with a focus on Asia and Africa.
This year, we are proud to celebrate Prudential’s 100th anniversary in Malaysia.
Source: <a href="https://www.prudential.com.my/en/our-company-about-us/" target="_self">prudential.com</a>

Who We Are

Purpose
For Every Life, For Every Future
Mission
To be the most trusted partner and protector for this generation and generations to come.
Source: <a href="https://www.prudential.com.my/en/our-company-about-us/" target="_self">prudential.com</a>

Our Values

Prudential's purpose is to help people get the most out of life. We will deliver our purpose by creating a culture in which diversity is celebrated and inclusion assured, for our colleagues, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and in exchange, we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow and Succeed.The patch and vulnerability management are an ongoing, regular operations process of identifying, assessing, managing, remediating operating systems cyber vulnerabilities. The Patch &amp; Vulnerability Management SME provides technical leadership in overseeing and managing the patch management process within Prudential group to protect Mission Critical Systems and Services to avoid unforeseen disruptions. This role will be primarily responsible for ensuring that all software and systems are up to date with the latest patches and hotfixes, minimizing security vulnerabilities, and maintaining optimal system performance. He/she will lead and manage a team of outsourced engineers to manage the end-to-end patch management activities. The role also requires close collaboration with various teams to develop and implement effective patch management strategies and ensures compliance with industry standards and best practices. The ideal candidate is expected to provide complex patch management program leadership within the enterprise and continuously promotes strong partnerships between Group Technology Operations (GTO) team and LBUs. This position is responsible for overseeing the effective IT operations following company risk management frameworks, and ensure alignment with the organisation’s rapid growth and increasing regulatory requirements.Roles and Responsibilities:<ul><li>Provide domain and subject matter expertise in vulnerability and patch management.</li><li>Design, develop, review, and maintain a comprehensive patch management strategy and practice for the overall IT operations environment, considering security, operational, and business requirements.</li><li>Conduct regular patch management and vulnerability assessments to identify potential security risks and prioritize patching based on criticality, urgency, and impact. Such assessment should cover all layers of enterprise infrastructure, endpoints, server hardware, operating systems, and applications.</li><li>Collaborate with the security team to evaluate the risk associated with unpatched vulnerabilities and recommend appropriate mitigation strategies.</li><li>Closely collaborate with colleagues in Group Information Security &amp; Privacy (GISP) team to review guidelines, policies, and procedures for patch management activities and ensure adherence across the organisation.</li><li>Review and coordinate the deployment of patches, updates, and security fixes across all systems, applications, and infrastructure.</li><li>Establish and/or enhance a standardised thorough testing process to verify the compatibility and stability of patches before deployment to production environments.</li><li>Work closely with infrastructure, application, security, and BU IT teams to schedule and implement patching activities with minimal impact on business operations.</li><li>Prepare detailed reports, metrics, and insights on patch compliance, analyse vulnerability remediation progress, and system performance to management and stakeholders. Regularly communicate the progress of patch management initiatives to senior leadership.</li><li>Analyse threats, vulnerability feeds, patch management gaps and propose continuous improvement / remediation plans.</li><li>Demonstrating system health and patching / vulnerability remediation compliance status based on predefined standards and routine maintenance of patch management.</li><li>Provide support during incident response efforts related to vulnerabilities or issues arising from patching activities.</li><li>Investigate and troubleshoot patch-related problems, collaborating with relevant teams to identify root causes and implement corrective actions.</li><li>Work within the change management and service management processes within Group Technology teams for all patch management coordination and execution.</li><li>Support the production of change risk assessments planned by Group Technology teams performing patch management and be able to present the changes to Change Advisory Boards, both internal and external.</li><li>Support technical evaluation and evidence for security assessments and audits.</li><li>Staying updated on new developments, emerging threats and vulnerabilities in cybersecurity standards, best practices and technologies related to patch management.</li></ul>Desirable Qualifications, Skills and Experience;<ul><li>Bachelor’s degree and/or advanced diploma in IT related or relevant field.</li><li>At least 10 years of experience in Information Technology Operations, Engineering and/or IT Security function.</li><li>8 or more years of proven experience in IT patch management, vulnerability remediation, patch deployment experience, or a similar role.</li><li>Proven track record in developing and implementing a vulnerability and patch management program utilising a Vulnerability and Patch Management Framework such as NIST Cybersecurity Framework.</li><li>Demonstrated knowledge in systems vulnerability management and system hardening to mitigate Common Vulnerability and Exposures (CVE).</li><li>Strong knowledge of software patching methodologies and deployment tools such as SCCM, Red Hat Satellite and Jamf is preferred.</li><li>Solid experience in managing patch management for enterprise-wide Operating Systems such as Microsoft, Linux, AIX, AS400, Endpoint Protection software &amp; tools.</li><li>Familiarity with vulnerability assessment tools (Qualys, Nessus, etc.) and techniques is a plus.</li><li>Experience with patch management automation systems and deployment methodologies.</li><li>Solid understanding of legacy and modern IT Infrastructure architectures &amp; related technologies, network/web related protocols, security principles, and common security vulnerabilities.</li><li>Excellent communication and collaboration skills to work effectively with cross-functional teams, and manage stakeholder engagement.</li><li>Must understand cloud computing and IAAS services from patch management aspect.</li><li>Solid experience in project management and execution in IT Infrastructure / Operations.</li><li>Sound knowledge in ITIL, IT operations, project methodology and tools.</li><li>Self-driven &amp; motivated, tenacious problem solver will own issues until full resolution.</li><li>Ability to carry out tasks to a high standard with a strong eye for attention to detail and thorough approach to their work.</li><li>Demonstrate strong analytical and problem-solving skills, excellent judgement, and possess a passion for continuous learning.</li><li>Background in regulated global companies a plus (financial institutions, pharmaceutical, healthcare, or similar).</li><li>Experience managing and working with MSP, minimum of 3 years of experience managing diverse technical teams</li></ul>&nbsp; Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.<div></div>

This job is a Senior Manager role in Patch &amp; Vulnerability Management at Prudential. You might like this job because you&#x27;ll lead a team, ensure systems are secure with the latest patches, and collaborate with various teams to protect the organization from cyber threats.

Prudential's purpose is to help people get the most out of life. We will deliver our purpose by creating a culture in which diversity is celebrated and inclusion assured, for our colleagues, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and in exchange, we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow and Succeed.The patch and vulnerability management are an ongo...

Senior Manager, Patch & Vulnerability Management

Prudential plc

Senior System Engineer

Hiredly X

Senior Security Engineer

Hiredly X

Senior IT Executive / IT Executive

S & P Industries Sdn Bhd

Senior Software Engineer

Webplus Digital Sdn Bhd

Assistant Manager, Systems Engineering

Pixlr Group

Senior Software Engineer (Angular & Spring Boot) - 4 days WFH!

Hiredly X

Assistant Manager, Infrastructure & Cloud

Cuckoo International (MAL) Berhad

Senior Software Project Manager

Stampede Solution

Senior Developer

Strella Consulting

Company Profile

Prudential plc