Head Of Vulnerability Assessment And Penetration Testing VAPT

A leading Philippine conglomerate is seeking an experienced Head of Vulnerability Assessment and Penetration Testing (VAPT) t lead its enterprise-wide vulnerability management and offensive security program.

This is a strategic leadership role with a strong technical focus, responsible for driving the organization's vulnerability management strategy while remaining hands-on during critical incidents and operational escalations.

Working closely with executive leadership, technology teams, and business stakeholders, you will strengthen the organization's security posture across infrastructure, cloud, applications, and enterprise platforms. You will also lead and mentor a high-performing VAPT team, champion automation and process improvements, and play a key role in safeguarding the organization's digital assets.

• Lead the enterprise VAPT and Vulnerability Management function while remaining technically hands-on when operational support is required.
• Partner with business and technology leaders to identify, assess, and mitigate cyber risks across infrastructure, cloud, and applications.
• Work with enterprise security technologies including Qualys, Snyk, and other vulnerability management solutions while contributing to the organization's long-term cyber resilience.
  
  

What You'll Do

As the Head of VAPT, you will lead the organization's vulnerability management strategy while overseeing day-to-day offensive security operations. You will drive governance, remediation initiatives, and risk management across enterprise environments, while providing technical leadership during critical security events. Success in this role requires balancing strategic leadership with hands-on expertise and collaborating effectively with both technical and executive stakeholders.

• Lead the enterprise Vulnerability Assessment & Penetration Testing (VAPT) program and vulnerability management lifecycle.
• Develop security strategies, governance, standards, KPIs, and continuous improvement initiatives.
• Build, mentor, and lead a high-performing VAPT team.
• Oversee vulnerability assessments across infrastructure, applications, cloud, networks, endpoints, and databases.
• Manage enterprise vulnerability management platforms, particularly Qualys, ensuring timely identification, prioritization, and remediation of security risks.
• Partner with Infrastructure, Cloud, Development, and Security Operations teams to drive remediation efforts.
• Lead security risk assessments for new technologies, architecture changes, and exception requests.
• Serve as the technical escalation point during critical security incidents, providing hands-on operational support whenever necessary.
• Present vulnerability trends, security risks, and remediation progress to technical and executive stakeholders.
  
  

What You Bring

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8–12+ years of cybersecurity experience with deep expertise in Vulnerability Assessment & Penetration Testing (VAPT) and Vulnerability Management.
• Proven leadership experience managing cybersecurity teams or enterprise vulnerability management programs.
• Strong hands-on experience with Qualys or similar enterprise vulnerability management platforms.
• Extensive experience in infrastructure and application vulnerability assessments, penetration testing, vulnerability remediation, and risk assessments.
• Strong understanding of networking, operating systems, cloud security, web applications, infrastructure security, and secure architecture.
• Excellent communication skills with the ability to engage both technical and non-technical stakeholders, including executive leadership.
• Ability to balance strategic leadership with hands-on technical responsibilities.
• Candidates with active cybersecurity certifications will be highly preferred, including CISSP, CISM, OSCP, CEH, GIAC, or Qualys certifications.
• Willing to work full onsite in Pasay, support Day or Mid Shift schedules, and participate in on-call rotations.
  
  

What Sets This Company Apart

Join one of the Philippines' largest and most respected conglomerates, where you'll help shape the organization's cybersecurity strategy and strengthen its enterprise security posture. You'll have the opportunity to lead a highly skilled team, work with advanced security technologies, collaborate with senior business leaders, and make a lasting impact on the organization's cyber resilience.

What's Next

If you're ready to lead a high-impact cybersecurity function while staying technically engaged, we'd love to hear from you.

Apply today to take the next step in your cybersecurity leadership career.



Due to the high volume of applications we are experiencing, our team will only be in touch with you if your application is shortlisted.

---