IT Security Specialist (Bank / Finance, CISSP/CISP/CISA, 55-70K)

Swing Consulting Limited; Hong Kong; On-site; HKD 55,000 - 70,000; Full time

Benefits offered by this job

55-70K salary depending on experience

10–20 days annual leave

5-day work week

Friendly and energetic environment

Job summary

Swing Consulting Limited in Hong Kong seeks an IT Security Specialist focused on vulnerability and threat exposure management. You design, administer and optimize scanning programs across on-prem and cloud environments, while aligning with ISO 27001 and NIST CSF requirements.

You will track CVEs, manage patch workflows using ITSM tools, and collaborate with IT operations and vendors to ensure compliance. A CISSP/CISA/CISP is preferred, with fluency in Cantonese, English and Mandarin, and a

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• ≥6 years in Information Security with focus on vulnerability management and threat exposure management.
• Experience managing vulnerability programs across on-prem, cloud, and containerized environments.
• Experience interpreting CVEs, CVSS, exploit databases.
• Experience with patch management tools and ITSM platforms.
• Knowledge of ISO 27001, NIST CSF, DPO IT Security Policy, Cybersecurity Law PRC.
• Certs like CISSP, CISP or CISA preferred.
• Good communication in Cantonese, English, Mandarin.

Responsibilities

• Design, administer and optimize vulnerability scanning program, including credentialed/non-credentialed scans.
• Drive a holistic threat exposure and prioritization framework beyond CVSS.
• Track CVEs, threat intel, and industry benchmarks to calibrate policies.
• Administer, support and troubleshoot cybersecurity systems.
• Develop, maintain and refine runbooks for DR, patching, monitoring and auditing.
• Collaborate with vendors and stakeholders to address compliance.
• Facilitate cross-functional adoption of security controls.
• Advise leadership on strategic technology adoption.

Skills

Vulnerability management

Threat exposure prioritization

Patch management

DevSecOps

Cloud & container security

Compliance knowledge

Scripting for automation

Multilingual communication

Education

Bachelor’s degree in Computer Science or related field

Tools

ITSM platforms

Patch management tools

Vulnerability scanners

CI/CD tooling

Job description

SW9066 |06 Nov 2026 IT Security Specialist (Bank / Finance, CISSP/CISP/CISA, 55-70K)

• Design, administer and optimize a comprehensive vulnerability scanning program, including credentialed/non-credentialed scans, agent-based scans, internal and external vulnerability scans.
• Drive a holistic threat exposure and prioritization framework that transcends standard CVSS metrics by evaluating asset criticality, exploitability, distance from exposure, and data classification.
• Continuously track emerging CVEs, threat intelligence, and industry benchmarks to dynamically calibrate scanning policies and risk prioritization models.
• Participate in system integration developments and administer, support and troubleshoot cybersecurity systems.
• Develop, maintain, and refine operational runbooks and procedures spanning backup/disaster recovery, patch management, system health monitoring, and compliance auditing.
• Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.
• Facilitate cross-functional adoption of security controls by working hand-in-hand with IT operations and business teams.
• Research emerging security paradigms and advise leadership on strategic technology adoption.

• Bachelor’s degree or above in Computer Science, Information Security, Cybersecurity, or a related field.
• At least 6 years of experience in Information Security / Cybersecurity, with a specialized focus on vulnerability management and threat exposure management.
• Hands-on experience in managing vulnerability management programs across complex, hybrid environments (on-premises, cloud, and containerized).
• Experience interpreting CVEs, CVSS scores, and exploit databases to assess organizational risk.
• Hands-on experience with patch management tools and IT service management platforms for ticketing and workflow automation.
• Knowledge of DevSecOps practices is an advantage.
• Knowledge of computer systems, including operating systems, databases, networks, infrastructure, containerized environments, and cloud computing.
• Familiar with IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.
• Professional cybersecurity certifications such as CISSP, CISP, or CISA is highly preferred.
• Scripting skills for automation is an advantage.
• Immediate available is highly preferred.
• Good communication skills in Cantonese, English, and Mandarin.
• Benefits:
• 55-70K Depends on Experience
• 10-20 Days Annual Leave
• 5-day Work Week
• Friendly and Energetic Working Environment