IT Security Specialist: Vulnerability & Threat Ops Lead

Swing Consulting Limited; Hong Kong; On-site; HKD 55,000 - 70,000; Full time

Benefits offered by this job

55-70K salary depending on experience

10–20 days annual leave

5-day work week

Friendly and energetic environment

Job summary

Swing Consulting Limited in Hong Kong seeks an IT Security Specialist focused on vulnerability and threat exposure management. You design, administer and optimize scanning programs across on-prem and cloud environments, while aligning with ISO 27001 and NIST CSF requirements.

You will track CVEs, manage patch workflows using ITSM tools, and collaborate with IT operations and vendors to ensure compliance. A CISSP/CISA/CISP is preferred, with fluency in Cantonese, English and Mandarin, and a

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• ≥6 years in Information Security with focus on vulnerability management and threat exposure management.
• Experience managing vulnerability programs across on-prem, cloud, and containerized environments.
• Experience interpreting CVEs, CVSS, exploit databases.
• Experience with patch management tools and ITSM platforms.
• Knowledge of ISO 27001, NIST CSF, DPO IT Security Policy, Cybersecurity Law PRC.
• Certs like CISSP, CISP or CISA preferred.
• Good communication in Cantonese, English, Mandarin.

Responsibilities

• Design, administer and optimize vulnerability scanning program, including credentialed/non-credentialed scans.
• Drive a holistic threat exposure and prioritization framework beyond CVSS.
• Track CVEs, threat intel, and industry benchmarks to calibrate policies.
• Administer, support and troubleshoot cybersecurity systems.
• Develop, maintain and refine runbooks for DR, patching, monitoring and auditing.
• Collaborate with vendors and stakeholders to address compliance.
• Facilitate cross-functional adoption of security controls.
• Advise leadership on strategic technology adoption.

Skills

Vulnerability management

Threat exposure prioritization

Patch management

DevSecOps

Cloud & container security

Compliance knowledge

Scripting for automation

Multilingual communication

Education

Bachelor’s degree in Computer Science or related field

Tools

ITSM platforms

Patch management tools

Vulnerability scanners

CI/CD tooling

Job description

Swing Consulting Limited in Hong Kong seeks an IT Security Specialist focused on vulnerability and threat exposure management. You design, administer and optimize scanning programs across on-prem and cloud environments, while aligning with ISO 27001 and NIST CSF requirements.

You will track CVEs, manage patch workflows using ITSM tools, and collaborate with IT operations and vendors to ensure compliance. A CISSP/CISA/CISP is preferred, with fluency in Cantonese, English and Mandarin, and a