Cybersecurity and Vulnerability Analyst - Insurance, 50k
As a Cybersecurity and Vulnerability Analyst, your main responsibilities will include:
- Monitor and track security assurance activities across IT systems and applications.
- Review and interpret vulnerability assessment reports, identify remediation requirements, and coordinate follow-up actions with technology teams.
- Analyze configuration compliance reports covering cloud environments, servers, databases, and web applications, and drive remediation activities.
- Coordinate with IT teams to consolidate remediation status, obtain implementation estimates where required, and ensure timely closure of security findings.
- Partner with Cyber Security and Infrastructure teams to ensure compliance with security standards, patching requirements, and regulatory expectations.
- Develop and maintain security dashboards, metrics, and management reports using Excel and Power BI.
- Facilitate monthly security review meetings, present current security posture, track remediation progress, and engage stakeholders on outstanding issues.
- Provide regular updates and reporting to management and overarching security programs.
- Support cybersecurity, compliance, and risk management initiatives on an ad hoc basis.
Drive enterprise-wide cybersecurity improvements.Insurance
A successful Cybersecurity and Vulnerability Analyst should have:
- Bachelor's degree in Computer Science, Information Technology, Information Management, Cyber Security, or a related discipline.
- 5+ years of experience in financial services, cybersecurity, risk, or security-related projects is highly desirable.
- Knowledge of vulnerability management, security remediation, patch management, or configuration compliance processes.
- Strong data analysis and reporting capabilities using Excel and Power BI.
- Experience with reporting automation tools such as Power Automate or Power Apps.
- Cantonese and/or Mandarin language skills are beneficial but not required.
- Demonstrated ability to collaborate effectively across technical and non-technical teams.
Well-known insurance group