SW9066 |
06 Nov 2026
IT Security Specialist (Bank / Finance, CISSP/CISP/CISA, 55-70K)
- Design, administer and optimize a comprehensive vulnerability scanning program, including credentialed/non-credentialed scans, agent-based scans, internal and external vulnerability scans.
- Drive a holistic threat exposure and prioritization framework that transcends standard CVSS metrics by evaluating asset criticality, exploitability, distance from exposure, and data classification.
- Continuously track emerging CVEs, threat intelligence, and industry benchmarks to dynamically calibrate scanning policies and risk prioritization models.
- Participate in system integration developments and administer, support and troubleshoot cybersecurity systems.
- Develop, maintain, and refine operational runbooks and procedures spanning backup/disaster recovery, patch management, system health monitoring, and compliance auditing.
- Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.
- Facilitate cross-functional adoption of security controls by working hand-in-hand with IT operations and business teams.
- Research emerging security paradigms and advise leadership on strategic technology adoption.
- Bachelor’s degree or above in Computer Science, Information Security, Cybersecurity, or a related field.
- At least 6 years of experience in Information Security / Cybersecurity, with a specialized focus on vulnerability management and threat exposure management.
- Hands-on experience in managing vulnerability management programs across complex, hybrid environments (on-premises, cloud, and containerized).
- Experience interpreting CVEs, CVSS scores, and exploit databases to assess organizational risk.
- Hands-on experience with patch management tools and IT service management platforms for ticketing and workflow automation.
- Knowledge of DevSecOps practices is an advantage.
- Knowledge of computer systems, including operating systems, databases, networks, infrastructure, containerized environments, and cloud computing.
- Familiar with IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.
- Professional cybersecurity certifications such as CISSP, CISP, or CISA is highly preferred.
- Scripting skills for automation is an advantage.
- Immediate available is highly preferred.
- Good communication skills in Cantonese, English, and Mandarin.
- Benefits:
- 55-70K Depends on Experience
- 10-20 Days Annual Leave
- 5-day Work Week
- Friendly and Energetic Working Environment
Registering your information in our database let use easier to match the most suitable job for you. Please fill in the following form to get registerd in our database or you may email your information in MS WORD format directly to jobs@swing-hk.com.