# Senior Project Manager - AVP - Information Security - IT - 12 months contract

**Company**: HKEX
**Location**: Hong Kong
**Experience**: senior
**Job type**: contract
**Category**: IT
**Industry**: Finance

**Apply**: https://hkex.wd3.myworkdayjobs.com/en-US/HKEXCareerPage/job/HK-TKO-5F/Senior-Project-Manager---AVP----Information-Security---IT_R004176?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_abc673b5-65d

## Description

The AVP, Senior Project Manager – Information Security is a key strategic role responsible for delivering end-to-end security initiatives and programs across the organization, ensuring alignment with enterprise security standards, regulatory requirements, and project governance frameworks.

This position focuses on driving secure project execution, risk mitigation, and stakeholder alignment within complex IT and security environments. It also requires strict adherence to organizational processes and controls, including procurement, financial governance, and project reporting requirements.

**Job Responsibilities:**

- Delivery of projects within scope, time, and budget

- Compliance with security and regulatory requirements

- Effective risk mitigation and issue resolution

- Stakeholder satisfaction and business alignment

**Project Delivery & Governance**

- Lead full project lifecycle delivery (planning, initiation, design, build, implementation, closure) in accordance with the Project Management Framework (PMF).

- Establish and manage project governance structures (Project Steering Committee (PSC), Project Management Team (PMT), Project Working Team (PWT)) and reporting cadence.

- Develop and maintain key project artifacts (Project Initiation Document (PID), project schedule, risk register, status reports, closure reports).

- Ensure adherence to change control, milestone reviews, and approval processes.

**Security Program & Controls Implementation**

- Drive implementation of IT Security Management Framework (SMF) controls across projects, e.g., Software Development Life Cycle (SDLC).

- Ensure security requirements are embedded across system lifecycle (design, development, testing, deployment).

- Lead security-related initiatives including:

+ Access control and identity management   + Infrastructure and network security   + Security monitoring and incident readiness   + Data protection, encryption, and compliance

- Ensure alignment with standards such as ISO 27001, NIST, and internal policies.

**Project Risk & Compliance Management**

- Identify, assess, and manage project and security risks through formal risk registers and assessments.

- Drive mitigation strategies for technology, operational, and security risks.

- Ensure compliance with internal security policies, audit requirements, and regulatory obligations.

- Coordinate project-specific security reviews, vulnerability assessments, and audits.

**Project Stakeholder & Vendor Management**

- Engage senior stakeholders including business owners, IT leadership, and security teams.

- Provide regular reporting on progress, risks, budget, and issues to governance bodies.

- Manage external vendors and service providers, ensuring delivery against SLAs and contractual requirements.

- Facilitate cross-functional collaboration across IT, security, and business teams.

**Project Resource & Financial Management**

- Manage project budgets, forecasts, and expenditure tracking.

- Plan and allocate project resources effectively across teams.

- Ensure projects are delivered within scope, time, and budget constraints.

**Job Qualifications:**

- Education: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Business Administration related. A Master’s degree (e.g., MBA, MSc in Cybersecurity, or Information Systems) is preferred and considered an advantage.

- Experience: 8–12+ years of IT project management experience, with strong exposure to cybersecurity / security services. Proven track record delivering large-scale, complex IT/security programs. Experience in regulated environments (e.g., financial services) preferred.

- Technical & Domain Knowledge: Solid understanding of IT Security frameworks (ISO 27001, NIST, CIS, etc.), security domains (IAM, network security, endpoint security, cloud security, SIEM, vulnerability management), and SDLC and secure system development.

- Project Management Skills: Strong knowledge of structured PM methodologies (PMF, SDLC, waterfall; agile exposure is a plus). Expertise in risk management, change management, budget & resource management, and stakeholder communication.

- Certifications (Preferred): PMP / PRINCE2, CISSP / CISM / CISA (or equivalent security certification)

## Skills

### Required
- IT Security frameworks
- Security domains
- SDLC
- Project Management Framework
- Risk management
- Change management
- Budget & resource management
- Stakeholder communication
- ISO 27001
- NIST
- CIS
- IAM
- Network security
- Endpoint security
- Cloud security
- SIEM
- Vulnerability management

### Nice to have
- MBA
- MSc in Cybersecurity
- Information Systems
- PMP
- PRINCE2
- CISSP
- CISM
- CISA

---

Source: [Apply at hkex.wd3.myworkdayjobs.com](https://hkex.wd3.myworkdayjobs.com/en-US/HKEXCareerPage/job/HK-TKO-5F/Senior-Project-Manager---AVP----Information-Security---IT_R004176?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)