Cybersecurity Specialist – DLP & Vulnerability Management

About the role

We are looking for a Cybersecurity Specialist to lead vulnerability management and data loss prevention (DLP) across both IT and OT environments. The role will design, implement and maintain security controls, support incident response, and ensure compliance with relevant policies and regulations.

Key responsibilities

• Conduct regular vulnerability scanning, assessments and security reviews for IT and OT systems.
• Identify, validate, prioritize and track vulnerabilities, providing remediation recommendations.
• Design, implement and maintain security controls for IT/OT assets.
• Support operation of vulnerability management, DLP, SIEM and related security solutions.
• Manage and tune DLP policies to protect sensitive information.
• Integrate IT and OT log sources into SIEM, creating monitoring rules, alerts, dashboards and reports.
• Monitor security events, investigate incidents and support remediation.
• Perform security assessments for new systems, projects and major changes.
• Develop and maintain system hardening guidelines, procedures and documentation.
• Ensure IT and OT systems comply with policies, standards and regulatory requirements.
• Collaborate with IT, OT, engineering, project teams, system owners and vendors to embed security controls.
• Prepare metrics and management reports on vulnerabilities, DLP events and remediation progress.
• Stay up‑to‑date with emerging threats, vulnerabilities and industry best practices.

Required profile

• Degree in Computer Science, IT, Cybersecurity, Engineering or related field.
• Minimum 5 years of hands‑on technical experience in IT or OT cybersecurity roles.
• Strong command of spoken and written English; Chinese language skills are a plus.

Required skills

• Vulnerability scanning, assessment, prioritization and remediation tracking.
• SIEM implementation, security monitoring, log analysis and event investigation.
• DLP solutions, policy configuration and alert handling.
• Windows Server, Linux, virtualization and network administration.
• Firewalls, network segmentation, secure remote access and endpoint security.
• System hardening and operating‑system security.
• OT/Industrial Control System knowledge (SCADA, PLC, industrial networks).
• Industrial protocols such as Modbus, DNP3, PROFINET and OPC.