Senior Security Governance & Risk Lead

Hong Kong Exchanges and Clearing Limited (HKEX)

Hong Kong

On-site

HKD 1,000,000 - 1,600,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) is seeking an experienced security governance professional to lead enterprise security configuration standards, CIS Benchmark adoption, and exceptions management within a regulated financial services environment. The role also covers encryption/key management and internal CA governance, requiring strong analytical and stakeholder skills.

The ideal candidate will have 10+ years of information security governance experience, familiarity with CIS

Qualifications

Minimum 10 years of experience in information security governance, risk management or IT audit in financial services or regulated environments.
Strong understanding of CIS Benchmarks and security governance processes.
Excellent analytical and communication skills with stakeholders.
Ability to assess gaps and drive improvement opportunities.
Experience in encryption, key management and certificate governance.

Responsibilities

Manage and maintain enterprise security configuration baselines and CIS alignment.
Administer security exception management with business justification and approvals.
Oversee governance operations and approval processes for security standards.
Review and approve website, file upload and email whitelisting requests.
Oversee encryption and key management governance and internal CA governance.