AVP, Information Security Governance & Compliance

Hong Kong Exchanges and Clearing Limited; Tseung Kwan O; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited is seeking a senior information security governance professional to lead configuration baselines, CIS benchmark alignment, and security controls across the enterprise.

You will manage security exceptions, approval workflows, and key management governance, while ensuring compliance with regulatory requirements and industry best practices in a fast-paced financial markets environment.

Qualifications

• Minimum 10 years of experience in information security governance, risk management or IT audit in financial services or regulated environments.
• Strong understanding of CIS Benchmarks and security governance processes.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Manage and maintain enterprise security configuration standards and baselines.
• Administer security exception management with business justification and risk assessment.
• Perform governance and approval activities to ensure security standards are met.
• Review and approve website, file upload and email whitelisting requests per policies.
• Review and approve encryption key management requests according to cryptographic standards.
• Review internal Certificate Authority certificates and ensure proper issuance and management.
• Review SUDO registration and privileged escalation requests with least-privilege principles.
• Conduct Security Acceptance Checklist reviews as part of SDLC and approve SSRs with justified requirements.
• Review and approve non-standard software installation requests with risk mitigation.

Skills

InfoSec governance

Risk management

CIS Benchmarks

Stakeholder management

Analytical skills

Education

Bachelor's degree in Information Security

Certifications: CISSP/CISM/ISO 27001 Lead

Job description

Hong Kong Exchanges and Clearing Limited is seeking a senior information security governance professional to lead configuration baselines, CIS benchmark alignment, and security controls across the enterprise.

You will manage security exceptions, approval workflows, and key management governance, while ensuring compliance with regulatory requirements and industry best practices in a fast-paced financial markets environment.