Cyber Security Specialist | 65K | Financial Sector

The Adecco Group; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

The Adecco Group is seeking a seasoned security specialist to own the end‑to‑end vulnerability management lifecycle, spanning scanning, assessment, remediation coordination, and ongoing posture improvement. You will drive vulnerability programs across hybrid environments and collaborate with IT and business teams to strengthen defenses.

The ideal candidate has 7+ years in cybersecurity, expertise in vulnerability intelligence (CVEs, CVSS) and hands-on tooling, and relevant certifications.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related field.
• 7+ years hands-on cybersecurity experience focused on vulnerability management.
• Experience leading vulnerability programs across hybrid environments (on‑prem, cloud).
• Strong understanding of CVEs, CVSS, exploit analysis, and risk-based remediation.
• Experience with vulnerability scanning tools, patch management, and ITSM.
• Knowledge of DevSecOps and SDLC security principles.
• Security certifications (CISSP, CISA, CISM, GIAC) are advantageous.
• Familiarity with ISO 27001, NIST CSF, regulatory frameworks.

Responsibilities

• Design and optimize vulnerability scanning programs across internal, external, agent-based, and credentialed environments.
• Manage assessment, risk prioritisation, and threat exposure analysis.
• Monitor emerging cyber threats and update detection/remediation strategies.
• Administer and troubleshoot cybersecurity platforms and integrations.
• Develop procedures for vulnerability management, patching, backup, DR and audits.
• Collaborate with IT and vendors to implement security controls.
• Partner with IT and business teams to drive remediation and cybersecurity initiatives.
• Evaluate new security technologies and provide recommendations.

Skills

Vulnerability management

Threat exposure management

Security operations

DevSecOps

Automation scripting

Certifications (CISSP/CISA/CISM)

Education

Degree in Computer Science / Information Security / Engineering

Tools

Vulnerability scanning tools

Patch management software

ITSM platforms

PowerShell

Python

Bash

Job description

Our client is a financial regulatory which they are looking for a seasoned security specialist who will be responsible for the end-to-end vulnerability management lifecycle, including vulnerability scanning, assessment, risk prioritisation, remediation coordination with IT teams, and continuous improvement of the organisation's security posture.

What you will focus...

• Design, implement, and optimize enterprise vulnerability scanning programs across internal, external, agent-based, and credentialed environments.
• Manage vulnerability assessment, risk prioritisation, and threat exposure analysis using factors such as asset criticality, exploitability, business impact, and data sensitivity.
• Monitor emerging cyber threats, vulnerabilities, and industry best practices to continuously enhance detection and remediation strategies.
• Administer, support, and troubleshoot cybersecurity platforms and security-related system integrations.
• Develop and maintain operational procedures covering vulnerability management, patching, system maintenance, monitoring, backup, disaster recovery, and audit requirements.
• Collaborate with internal stakeholders and technology vendors to ensure security controls and compliance requirements are effectively implemented.
• Partner with IT and business teams to drive remediation efforts and enable cybersecurity initiatives across the organisation.
• Evaluate emerging security technologies and provide recommendations to strengthen the organisation's cybersecurity posture.

What makes you outstanding...

• Degree holder in Computer Science, Information Security, Engineering, or a related discipline.
• Minimum 7 years of hands-on experience in cybersecurity, with a strong focus on vulnerability management, threat exposure management, or security operations.
• Demonstrated experience leading and operating vulnerability management programs within large-scale hybrid environments spanning on-premises infrastructure, cloud platforms, and containerized workloads.
• Strong understanding of vulnerability intelligence, including CVEs, CVSS scoring, exploit analysis, and risk-based remediation methodologies.
• Practical experience with vulnerability scanning tools, patch management solutions, and IT Service Management (ITSM) platforms.
• Solid knowledge of DevSecOps practices and secure software development lifecycle (SDLC) principles.
• Strong technical foundation across operating systems, networks, databases, cloud technologies, infrastructure platforms, and container ecosystems.
• Experience in scripting and automation using tools such as PowerShell, Python, or Bash is highly desirable.
• Professional security certifications such as CISSP, CISA, CISM, GIAC, or equivalent are advantageous.
• Good understanding of industry security standards, frameworks, and regulatory requirements, including ISO 27001, NIST Cybersecurity Framework, and other relevant cybersecurity governance and compliance frameworks.

Please note that only short listed candidates will be notified. All information gathered will be treated in strict confidence and solely used for recruitment purposes.