Cyber Security Vulnerability Program Lead (Hong Kong)

Recruit Squad Limited; Hong Kong; On-site; HKD 800,000 - 1,300,000; Full time

Job summary

Recruit Squad Limited is seeking an IT Cyber Security Manager (Vulnerability Management) to lead our vulnerability programs in a hybrid IT environment. You will manage scanning, assessment, prioritisation and remediation, and work closely with IT teams and vendors to implement robust security controls.

The role requires 7+ years in IT security focusing on vulnerability/threat exposure management, strong CVE interpretation, patch management experience, and relevant cybersecurity certifications.

Qualifications

• Bachelor’s or above degree in Computer Science, Information Security, Engineering or related field.
• 7+ years of experience in IT security with a focus on vulnerability management and threat exposure management.
• Proven track record of managing vulnerability management programs in complex, hybrid environments (on-prem, cloud, containerised).
• Deep proficiency in interpreting CVEs, CVSS scores, and exploit databases to assess risk.
• Experience with patch management tools and IT service management platforms for ticketing/workflow automation.
• Strong understanding of DevSecOps practices.
• Knowledge of IT systems including operating systems, databases, networks, infrastructure, containerised environments and cloud computing.
• Scripting skills for automation are advantageous.
• CISSP, CISA, or CISM-type certifications preferred.
• Familiarity with ISO 27001, NIST CSF, DPO IT Security Policy and Cybersecurity Law of PRC.
• Experience in international teams and financial services is a plus.
• Fluent in English, Cantonese, and/or Mandarin.

Responsibilities

• Lead continuous vulnerability management programs across the organisation and coordinate remediation with IT teams.
• Oversee end-to-end lifecycle of vulnerability management, including scanning, assessment, prioritisation, and continuous improvement.
• Design and optimise a comprehensive vulnerability scanning program (credentialed/non-credentialed, agent-based, internal/external).
• Implement a prioritisation framework that factors asset criticality, exposure distance, exploit availability, and data sensitivity.
• Stay current with threats, CVEs and industry best practices to adjust scan policies and prioritisation.
• Collaborate with vendors and internal stakeholders to ensure compliance and effective security solutions.
• Develop, maintain and refine operating procedures for backup, patch management, system maintenance and auditing.
• Coordinate with IT and business users to enable cybersecurity solutions.

Skills

Vulnerability management

Threat exposure management

CVEs & CVSS interpretation

Patch management

DevSecOps

Cloud & hybrid environments

Scripting for automation

Cybersecurity certifications

English/Cantonese/Mandarin

Education

Bachelor's or above degree

Job description

Recruit Squad Limited is seeking an IT Cyber Security Manager (Vulnerability Management) to lead our vulnerability programs in a hybrid IT environment. You will manage scanning, assessment, prioritisation and remediation, and work closely with IT teams and vendors to implement robust security controls.

The role requires 7+ years in IT security focusing on vulnerability/threat exposure management, strong CVE interpretation, patch management experience, and relevant cybersecurity certifications.