AVP Information Security Program Lead

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 900,000 - 1,150,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited is seeking an AVP, Senior Project Manager – Information Security to drive end-to-end security initiatives and programs, ensuring alignment with enterprise security standards, regulatory requirements, and project governance frameworks in complex IT environments.

You will lead governance bodies, manage budgets and vendors, and report progress to senior stakeholders while embedding security across the software lifecycle.

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity/Information Systems or Business Admin; Master’s preferred.
• 8–12+ years IT project management with cybersecurity services experience.
• Knowledge of IT security frameworks: ISO 27001, NIST, CIS.
• PM methods: PMF, SDLC; Agile exposure a plus.
• Certifications: PMP/PRINCE2, CISSP/CISM/CISA or equivalent preferred.

Responsibilities

• Lead end-to-end IT security program delivery and governance aligned to PMF.
• Embed security requirements across the system lifecycle (SDLC, design, build, test).
• Manage project risks, controls, audits, and regulatory obligations.
• Engage senior stakeholders and vendors; report on progress, budget, and issues.
• Oversee budgets, forecasts, and resource allocation to meet scope, time, and budget.

Skills

IT project management

Cybersecurity

ISO 27001

NIST

CIS

SDLC

PMF

Waterfall

Agile exposure

Stakeholder communication

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration

Master’s degree preferred (e.g., MBA, MSc in Cybersecurity)

Job description

Hong Kong Exchanges and Clearing Limited is seeking an AVP, Senior Project Manager – Information Security to drive end-to-end security initiatives and programs, ensuring alignment with enterprise security standards, regulatory requirements, and project governance frameworks in complex IT environments.

You will lead governance bodies, manage budgets and vendors, and report progress to senior stakeholders while embedding security across the software lifecycle.