Assistant Manager - Internal Audit (IT)

Aviation Security Company Limited; Hong Kong; On-site; HKD 500,000 - 800,000; Full time

Benefits offered by this job

Generous fringe benefits

Job summary

The Aviation Security Company Ltd. is a key subsidiary within the Hong Kong Airport Authority group, focused on safeguarding IT governance, cybersecurity, and internal controls.

This role requires leading IT audits and advising on regulatory compliance at Hong Kong International Airport. The ideal candidate will bring 5+ years in IT audit or cybersecurity, with certifications such as CISA/CISM/CIA, and fluency in English and Chinese.

Qualifications

• Bachelor’s degree in IT, Computer Science, Information Systems, Auditing, or related fields.
• Professional certifications such as CISA, CISM, or CIA are highly preferred.
• Minimum 5 years of relevant experience in IT audit, IT risk management, cybersecurity, and/or data security and management.
• Strong understanding of IT infrastructure, controls, cybersecurity frameworks, and data privacy standards (ISO 27001, NIST).
• Familiarity with IT governance frameworks (COBIT, ITIL) and regulatory requirements.
• Experience with data analytics tools and ERP systems (Power BI, Tableau, SAP) is a plus.
• Excellent analytical and problem-solving skills; strong communication and report-writing abilities.
• Proficiency in both spoken and written English and Chinese.

Responsibilities

• Manage multi-disciplinary audits independently with focus on IT governance, IT general and application controls, cybersecurity, IT infrastructure security, and related areas.
• Appraise and advise on adequacy of internal controls and compliance with policies, procedures, and regulatory requirements.
• Provide practical, value-added recommendations to enhance internal controls and operational efficiency; formulate action plans with relevant parties and monitor implementation.
• Support Internal Audit data analytics to identify insights and drive improvements in audit processes.
• Stay updated on emerging IT security threats, regulatory changes, and industry best practices.
• Contribute to continuous improvement of audit methodologies within the Internal Audit Division.
• Deliver assurance and advisory services, and conduct ad-hoc assignments for the Company.

Skills

IT audit

Cybersecurity

Data analytics

IT risk mgmt

Internal controls

English & Chinese

Education

Bachelor's degree in IT/CS

Tools

Power BI

Tableau

SAP

Job description

Level 3, HKIA Tower 2, 15 Cheong Tat Road, Hong Kong International Airport, Lantau, Hong Kong

The Aviation Security Company Ltd. is a subsidiary of the Airport Authority, Hong Kong and committed to providing the highest standards of aviation security at the Hong Kong International Airport.

Job Responsibilities

• Manage multi-disciplinary audits independently with focus on IT governance, IT general and application controls, cybersecurity, IT infrastructure security, and other related areas;
• Appraise and advise on the adequacy of internal controls and compliance with the Company policies, procedures, and regulatory requirements;
• Provide practical, value-added recommendations to enhance internal controls and operational efficiency, with action plans formulated in liaison with relevant parties and to monitor the subsequent proper implementation;
• Support the Internal Audit team in data analytics to identify insights and drive initiatives aimed at improving the effectiveness and efficiency of internal audit processes;
• Stay updated on emerging IT security threats, regulatory changes, and industry best practices;
• Contribute to the continuous improvement of audit methodologies and practices within the Internal Audit Division; and
• Deliver assurance and advisory services, and conduct ad-hoc assignments for the Company as directed.

Job Requirements

• Bachelor’s degree or above in Information Technology, Computer Science, Information Systems, Auditing, or related fields;
• Professional certifications, such as Certified Information Systems Auditor (CISA), Certified Informational Security Manager (CISM), or Certified Internal Auditor (CIA) are highly preferred;
• Minimum of 5 years of relevant experience in IT audit, IT risk management, cybersecurity, and/or data security and management;
• Strong understanding of IT infrastructure, application controls, cybersecurity frameworks, and data privacy standards (e.g., ISO 27001, NIST);
• Familiarity with IT governance frameworks (e.g., COBIT, ITIL), and relevant regulatory requirements;
• Experience with data analytics tools and ERP systems, such as Power BI, Tableau, and SAP, is a plus;
• Excellent analytical and problem-solving skills;
• Strong communication and report-writing abilities;
• Excel at working independently and collaborating effectively within teams;
• High level of integrity, professionalism, and attention to detail; and
• Proficiency in both spoken and written English and Chinese.

Application Deadline: 24 Aug 2026

We offer a competitive remuneration package and generous fringe benefit and all applications will be treated in the strictest confidence. -

Please note that only short-listed candidates will be contacted.

“Personal data provided by job applicants will be used strictly in accordance with the employer’s personal data policies, a copy of which will be provided immediately upon request.”