Information Security Leader: Strategy & Governance

Hong Kong International School; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Hong Kong International School is seeking an Information Security Manager to lead the school's information security program and governance. In partnership with the Director of Technology, you will develop strategy, own the governance framework, manage external security partners, and drive the program with proactive risk surfacing for leadership decisions.

This leadership role sits alongside other IT managers and requires coordinating across policy, incident response, and data protection to

Qualifications

• University graduate with a degree in Information Security, Computer Science, or related discipline.
• CISSP, CISM, or CISA certifications; SANS/GIAC valued.
• 7+ years in information security with at least 3 years in leadership, program management, or advisory capacity.
• Experience managing external security partners: managed SOC, MSSP, or penetration testers.

Responsibilities

• Own and lead the information security program and governance.
• Develop multi-year security strategy aligned to risk and strategic direction.
• Manage external security partners and lead incident response coordination.
• Maintain security policies, PDPO alignment, and data protection roadmap.
• Oversee vulnerability management, risk registers, and governance framework.
• Drive security awareness and cross-functional collaboration across IT and operations.

Skills

MS 365 security

MITRE ATT&CK

PDPO compliance

communication skills

AI security awareness

Cantonese/Mandarin advantageous

Education

Information Security/CS degree

CISSP/CISM/CISA

Tools

Microsoft 365 Defender

Microsoft Sentinel

Entra ID

Job description

Hong Kong International School is seeking an Information Security Manager to lead the school's information security program and governance. In partnership with the Director of Technology, you will develop strategy, own the governance framework, manage external security partners, and drive the program with proactive risk surfacing for leadership decisions.

This leadership role sits alongside other IT managers and requires coordinating across policy, incident response, and data protection to