Cybersecurity and Vulnerability Analyst - Insurance, 50k

• Drive enterprise-wide cybersecurity improvements.
• Insurance

About Our Client

Well-known insurance group

Job Description

As a Cybersecurity and Vulnerability Analyst, your main responsibilities will include:

• Monitor and track security assurance activities across IT systems and applications.
• Review and interpret vulnerability assessment reports, identify remediation requirements, and coordinate follow-up actions with technology teams.
• Analyze configuration compliance reports covering cloud environments, servers, databases, and web applications, and drive remediation activities.
• Coordinate with IT teams to consolidate remediation status, obtain implementation estimates where required, and ensure timely closure of security findings.
• Partner with Cyber Security and Infrastructure teams to ensure compliance with security standards, patching requirements, and regulatory expectations.
• Develop and maintain security dashboards, metrics, and management reports using Excel and Power BI.
• Facilitate monthly security review meetings, present current security posture, track remediation progress, and engage stakeholders on outstanding issues.
• Provide regular updates and reporting to management and overarching security programs.
• Support cybersecurity, compliance, and risk management initiatives on an ad hoc basis.

The Successful Applicant

A successful Cybersecurity and Vulnerability Analyst should have:

• Bachelor's degree in Computer Science, Information Technology, Information Management, Cyber Security, or a related discipline.
• 5+ years of experience in financial services, cybersecurity, risk, or security-related projects is highly desirable.
• Knowledge of vulnerability management, security remediation, patch management, or configuration compliance processes.
• Strong data analysis and reporting capabilities using Excel and Power BI.
• Experience with reporting automation tools such as Power Automate or Power Apps.
• Cantonese and/or Mandarin language skills are beneficial but not required.
• Demonstrated ability to collaborate effectively across technical and non-technical teams.