IT Security Specialist (Bank / Finance, CISSP/CISP/CISA, 55-70K)
Summary
Runs a bank/finance client's vulnerability and threat exposure management program: designs scanning (credentialed, agent-based, internal/external), prioritizes risks beyond CVSS, tracks CVEs, and maintains runbooks for patching, DR, and compliance. Needs 6+ years in cybersecurity; CISSP/CISP/CISA preferred.
Salary: $55,000 – $65,000 per month
Job Responsibilities:
Design, administer and optimize a comprehensive vulnerability scanning program, including credentialed/non-credentialed scans, agent-based scans, internal and external vulnerability scans.
Drive a holistic threat exposure and prioritization framework that transcends standard CVSS metrics by evaluating asset criticality, exploitability, distance from exposure, and data classification.
Continuously track emerging CVEs, threat intelligence, and industry benchmarks to dynamically calibrate scanning policies and risk prioritization models.
Participate in system integration developments and administer, support and troubleshoot cybersecurity systems.
Develop, maintain, and refine operational runbooks and procedures spanning backup/disaster recovery, patch management, system health monitoring, and compliance auditing.
Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.
Facilitate cross-functional adoption of security controls by working hand-in-hand with IT operations and business teams.
Research emerging security paradigms and advise leadership on strategic technology adoption.
Job Requirements:
Bachelor’s degree or above in Computer Science, Information Security, Cybersecurity, or a related field.
At least 6 years of experience in Information Security / Cybersecurity, with a specialized focus on vulnerability management and threat exposure management.
Hands-on experience in managing vulnerability management programs across complex, hybrid environments (on-premises, cloud, and containerized).
Experience interpreting CVEs, CVSS scores, and exploit databases to assess organizational risk.
Hands-on experience with patch management tools and IT service management platforms for ticketing and workflow automation.
Knowledge of DevSecOps practices is an advantage.
Knowledge of computer systems, including operating systems, databases, networks, infrastructure, containerized environments, and cloud computing.
Familiar with IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.
Professional cybersecurity certifications such as CISSP, CISP, or CISA is highly preferred.
Scripting skills for automation is an advantage.
Immediate available is highly preferred.
Good communication skills in Cantonese, English, and Mandarin.
Benefits:
55-70K Depends on Experience
10-20 Days Annual Leave
5-day Work Week
Friendly and Energetic Working Environment
Please send your full resume to us by email jobs@swing-hk.com, or you may click “Quick Apply” button.
For other vacancies, please visit our website www.swing-hk.com
All information provided will be treated in strict confidence and used for recruitment purposes only. (Licence No.: 83842)