Senior Project Manager - AVP - Information Security - IT - 12 months contract

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 900,000 - 1,150,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited is seeking an AVP, Senior Project Manager – Information Security to drive end-to-end security initiatives and programs, ensuring alignment with enterprise security standards, regulatory requirements, and project governance frameworks in complex IT environments.

You will lead governance bodies, manage budgets and vendors, and report progress to senior stakeholders while embedding security across the software lifecycle.

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity/Information Systems or Business Admin; Master’s preferred.
• 8–12+ years IT project management with cybersecurity services experience.
• Knowledge of IT security frameworks: ISO 27001, NIST, CIS.
• PM methods: PMF, SDLC; Agile exposure a plus.
• Certifications: PMP/PRINCE2, CISSP/CISM/CISA or equivalent preferred.

Responsibilities

• Lead end-to-end IT security program delivery and governance aligned to PMF.
• Embed security requirements across the system lifecycle (SDLC, design, build, test).
• Manage project risks, controls, audits, and regulatory obligations.
• Engage senior stakeholders and vendors; report on progress, budget, and issues.
• Oversee budgets, forecasts, and resource allocation to meet scope, time, and budget.

Skills

IT project management

Cybersecurity

ISO 27001

NIST

CIS

SDLC

PMF

Waterfall

Agile exposure

Stakeholder communication

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration

Master’s degree preferred (e.g., MBA, MSc in Cybersecurity)

Job description

Overview

AVP, Senior Project Manager – Information Security is a key strategic role responsible for delivering end-to-end security initiatives and programs, ensuring alignment with enterprise security standards, regulatory requirements, and project governance frameworks. The role focuses on driving secure project execution, risk mitigation, and stakeholder alignment within complex IT and security environments while adhering to organizational processes and controls including procurement, financial governance, and project reporting.

Responsibilities

1. Project Delivery & Governance: Lead full project lifecycle delivery (planning, initiation, design, build, implementation, closure) in accordance with the Project Management Framework (PMF). Establish and manage project governance structures (Project Steering Committee, Project Management Team, Project Working Team) and reporting cadence. Develop and maintain project artifacts (PID, project schedule, risk register, status reports, closure reports). Ensure adherence to change control, milestone reviews, and approval processes.
2. Security Program & Controls Implementation: Drive implementation of IT Security Management Framework (SMF) controls across projects (e.g., SDLC). Ensure security requirements are embedded across the system lifecycle (design, development, testing, deployment). Lead security-related initiatives including access control and identity management, infrastructure and network security, security monitoring and incident readiness, data protection and compliance. Ensure alignment with ISO 27001, NIST, and internal policies.
3. Project Risk & Compliance Management: Identify, assess, and manage project and security risks through formal risk registers and assessments. Drive mitigation strategies for technology, operational, and security risks. Ensure compliance with internal security policies, audit requirements, and regulatory obligations. Coordinate project-specific security reviews, vulnerability assessments, and audits.
4. Project Stakeholder & Vendor Management: Engage senior stakeholders including business owners, IT leadership, and security teams. Provide regular reporting on progress, risks, budget, and issues to governance bodies. Manage external vendors and service providers, ensuring delivery against SLAs and contractual requirements. Facilitate cross-functional collaboration across IT, security, and business teams.
5. Project Resource & Financial Management: Manage project budgets, forecasts, and expenditure tracking. Plan and allocate project resources effectively across teams. Ensure projects are delivered within scope, time, and budget constraints.

Qualifications

• Education: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration related. A Master’s degree (e.g., MBA, MSc in Cybersecurity, or Information Systems) is preferred.
• Experience: 8–12+ years of IT project management experience with strong exposure to cybersecurity/security services. Proven track record delivering large-scale, complex IT/security programs. Experience in regulated environments (e.g., financial services) preferred.
• Technical & Domain Knowledge: Understanding of IT security frameworks (ISO 27001, NIST, CIS, etc.), security domains (IAM, network security, endpoint security, cloud security, SIEM, vulnerability management), SDLC and secure system development, and familiarity with enterprise security controls and governance models.
• Project Management Skills: Knowledge of structured PM methodologies (PMF, SDLC, waterfall; agile exposure is a plus). Competences in risk management, change management, budget & resource management, and stakeholder communication.
• Certifications (Preferred): PMP / PRINCE2, CISSP / CISM / CISA (or equivalent).

Additional Information

HKEX is committed as an Equal Opportunity Employer. Diversity is a core value and we seek to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location: HKEX - TKO. Shift: Standard - 40 Hours (Hong Kong SAR). Scheduled Weekly Hours: 40. Worker Type: Permanent.

HKEX is a publicly-traded company and one of the world’s leading global exchange groups, offering a range of markets and services, including the London Metals Exchange. HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all.