Senior Information Security Program Lead

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 900,000 - 1,800,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) is seeking an AVP, Senior Project Manager – Information Security to lead end‑to‑end security programs and project governance across the organization. You will ensure alignment with enterprise security standards, regulatory requirements, and procurement, finance, and reporting controls.

You will drive secure project execution, risk mitigation, and stakeholder alignment within complex IT environments, coordinating with security teams, vendors, and

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration related.
• A Master’s degree (e.g., MBA, MSc in Cybersecurity, or Information Systems) is preferred and considered an advantage.
• 8–12+ years of IT project management experience, with strong exposure to cybersecurity / security services.
• Proven track record delivering large‑scale, complex IT/security programs.
• Experience in regulated environments (e.g., financial services) preferred.
• Solid understanding of IT Security frameworks (ISO 27001, NIST, CIS, etc.).
• Security domains (IAM, network security, endpoint security, cloud security, SIEM, vulnerability management).
• SDLC and secure system development; enterprise security controls and governance models.
• PM methodologies (PMF, SDLC, waterfall; agile exposure is a plus); risk, change, budget, and stakeholder management.

Responsibilities

• Delivery of projects within scope, time, and budget
• Compliance with security and regulatory requirements
• Effective risk mitigation and issue resolution
• Stakeholder satisfaction and business alignment
• Lead full project lifecycle delivery (planning, initiation, design, build, implementation, closure) per PMF
• Establish governance structures (PSC, PMT, PWT) and reporting cadence
• Develop and maintain PID, project schedule, risk register, status and closure reports
• Ensure adherence to change control, milestone reviews, and approval processes
• Drive implementation of SMF controls across projects (SDLC)
• Ensure security requirements across design, development, testing, deployment
• Lead security initiatives: access control, network security, monitoring, data protection
• Align with ISO 27001, NIST, and internal policies
• Identify, assess, and manage project and security risks; drive mitigation
• Coordinate security reviews, vulnerability assessments, and audits
• Engage stakeholders and vendors; report to governance bodies
• Manage budgets, forecasts, and resource allocation

Skills

IT project management

Security program governance

Leadership

Stakeholder communication

Risk management

Budget & resource management

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration related

Master’s degree preferred (MBA, MSc in Cybersecurity, or Information Systems)

Job description

Hong Kong Exchanges and Clearing Limited (HKEX) is seeking an AVP, Senior Project Manager – Information Security to lead end‑to‑end security programs and project governance across the organization. You will ensure alignment with enterprise security standards, regulatory requirements, and procurement, finance, and reporting controls.

You will drive secure project execution, risk mitigation, and stakeholder alignment within complex IT environments, coordinating with security teams, vendors, and