Threat & Vulnerability Management Lead - J13326

Pinpoint Asia; Hong Kong; Presencial; HKD 900.000 - 1.200.000; Jornada completa

Descripción de la vacante

Pinpoint Asia is recruiting a Threat & Vulnerability Management Lead for a large enterprise in Hong Kong. You will own the vulnerability lifecycle end-to-end, design comprehensive scanning programs, and build a prioritization framework that weighs asset criticality and exploit availability.

You will partner with IT infra, DevOps and vendors to drive remediation and integration of security tools. The role requires 7+ years in IT security, strong CVE/CVSS knowledge, patch management and ITSM

Formación

• Seven or more years in IT security owning vulnerability and threat exposure management.
• Deep knowledge of CVEs, CVSS scoring and exploit databases.
• Hands-on experience with patch management tools and ITSM platforms for ticketing/workflow automation.
• Strong understanding of OS, databases, network infra, and container/cloud environments.
• Automation scripting skills and security certifications (CISSP/CISM/CISA) are preferred.

Responsabilidades

• Own the vulnerability management lifecycle end-to-end.
• Design and run credentialed/non-credentialed scanning programs (agent-based, external/internal).
• Build a prioritization framework considering asset criticality, exploit availability and data sensitivity.
• Collaborate with IT infra, DevOps and vendors to drive remediation and integrate security tools.
• Maintain and tune SOPs including patch management, disaster recovery and system monitoring.

Conocimientos

Vulnerability management

Threat exposure management

CVEs & CVSS

Automation scripting

Cloud/container security

Security certifications (CISSP/CISM/CI

ISO 27001 / NIST / PRC Cybersecurity

Stakeholder collaboration

Herramientas

Patch management tools

ITSM platforms

Credentialed/agent-based scanning

Descripción del empleo

Threat & Vulnerability Management Lead - J13326

About the Client: We are partnering with a large-scale enterprise running a highly complex infrastructure footprint spanning on-premises data centers, modern cloud setups, and containerized environments. They are investing heavily in proactive threat management and need a dedicated specialist to mature their internal security posture.

The Role & Landscape: You will take complete ownership of the vulnerability management lifecycle. This isn't just about running scans and handing off reports; it's about context and remediation.

Design and run comprehensive scanning programs (credentialed/non-credentialed, agent-based, external/internal).

Build a prioritization framework that looks at actual threat exposure - factoring in asset criticality, exploit availability, and data sensitivity rather than just leaning on a flat CVSS score.

Work closely with IT infrastructure, DevOps, and technical vendors to drive actual remediation and integrate security tools.

Maintain and tune system operating procedures, including patch management, disaster recovery, and system monitoring.

What We Are Looking For:

7+ years in IT security, specifically owning vulnerability and threat exposure management.

Deep, practical knowledge of CVEs, CVSS scoring, and exploit databases.

Hands-on background with patch management tools and ITSM platforms for ticketing and workflow automation.

Strong technical understanding of operating systems, databases, network infra, and specifically containerized/cloud environments.

Ideally, you have scripting capability to automate workflows and hold certs like CISSP, CISM, or CISA.

Knowledge of frameworks like ISO 27001, NIST, and PRC Cybersecurity Law is a major plus.

Why Apply To This Role: This is an opportunity to build and dictate a vulnerability framework your way. You will have high visibility across different tech teams, working on modern infrastructure (cloud/containers) while having the autonomy to push security best practices forward without heavy red tape.