Senior Cyber Risk & Vulnerability Specialist

Michael Page (Hong Kong); Hong Kong; Sur place; HKD 900 000 - 1 400 000; Plein temps

Avantages offerts par ce poste

Mission-critical technology envr

Strategic cybersecurity exposure

Enterprise-scale environment

Strong investment in cybersecurity

Long-term career development

Résumé du poste

Michael Page (Hong Kong) is seeking an experienced cybersecurity professional to join a public sector organisation focused on technology innovation, resilience, and information security. You will drive vulnerability and cyber exposure management across enterprise environments, collaborating with technology teams to prioritise and remediate weaknesses.

The role emphasises threat intelligence, monitoring, governance, and compliance with industry standards, aiming to strengthen the organisation's

Qualifications

• Experience in Vulnerability Management, Security Operations, Security Engineering, Cyber Risk, or Threat Exposure Management.
• Good understanding of enterprise infrastructure, cloud technologies, operating systems, networks, and cybersecurity controls.
• Experience assessing vulnerabilities using CVEs, threat intelligence, exploitability analysis, and business impact considerations.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Controls, or equivalent.
• Knowledge of cloud security, automation, DevSecOps, or security engineering will be advantageous.
• Security certifications such as CISSP, CISA, CEH, Security+, or equivalent are welcomed.

Responsabilités

• Drive enterprise-wide vulnerability and cyber exposure management programmes.
• Assess security risks across infrastructure, cloud, network, and application environments.
• Partner with technology teams to identify, prioritise, and remediate security weaknesses.
• Leverage threat intelligence and emerging vulnerability trends to reduce organisational cyber risk.
• Continuously enhance security monitoring, scanning, reporting, and governance capabilities.
• Support cybersecurity initiatives across modern technology platforms and digital services.
• Contribute to security compliance, resilience, and risk management programmes aligned with industry standards and regulatory expectations.

Connaissances

Vulnerability Management

Security Operations

Security Engineering

Cyber Risk

Threat Exposure Management

ISO 27001

NIST CSF

CIS Controls

Cloud Security

DevSecOps

Security Certifications

Description du poste

• Strong investment in cybersecurity
• Strategic cybersecurity exposure

About Our Client

Our client is a well-established public sector organisation with a strong focus on technology innovation, operational resilience, and information security. As part of its continued investment in cybersecurity capabilities, the organisation is expanding its security function and seeking experienced professionals to help strengthen its cyber resilience programme.

Job Description

• Drive enterprise-wide vulnerability and cyber exposure management programmes.
• Assess security risks across infrastructure, cloud, network, and application environments.
• Partner with technology teams to identify, prioritise, and remediate security weaknesses.
• Leverage threat intelligence and emerging vulnerability trends to reduce organisational cyber risk.
• Continuously enhance security monitoring, scanning, reporting, and governance capabilities.
• Support cybersecurity initiatives across modern technology platforms and digital services.
• Contribute to security compliance, resilience, and risk management programmes aligned with industry standards and regulatory expectations

The Successful Applicant

• Experience in Vulnerability Management, Security Operations, Security Engineering, Cyber Risk, or Threat Exposure Management.
• Good understanding of enterprise infrastructure, cloud technologies, operating systems, networks, and cybersecurity controls.
• Experience assessing vulnerabilities using CVEs, threat intelligence, exploitability analysis, and business impact considerations.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Controls, or equivalent.
• Knowledge of cloud security, automation, DevSecOps, or security engineering will be advantageous.
• Security certifications such as CISSP, CISA, CEH, Security+, or equivalent are welcomed.

What's on Offer

• Opportunity to secure a mission-critical technology environment
• Strategic cybersecurity exposure
• Enterprise-scale environment
• Strong investment in cybersecurity
• Long-term career development