Assistant Manager - Internal Audit (IT)

AVIATION SECURITY COMPANY LIMITED (AVSECO); Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

AVIATION SECURITY COMPANY LIMITED (AVSECO) in Hong Kong seeks an experienced IT Audit professional to lead multi-disciplinary audits focused on IT governance, IT general and application controls, cybersecurity, and data security across the organization.

The role appraises internal controls, provides actionable recommendations, supports data analytics initiatives, and stays updated on regulatory changes and industry best practices.

Qualifications

• Bachelor’s degree or above in IT, CS, IS, auditing, or related fields.
• Professional certifications such as CISA, CISM, CIA are highly preferred.
• Minimum of 5 years of relevant IT audit, IT risk management, cybersecurity, and/or data security experience.
• Familiarity with IT governance frameworks (COBIT/ITIL) and regulatory requirements.

Responsibilities

• Manage multi-disciplinary audits independently with focus on IT governance, IT general and application controls, cybersecurity, IT infrastructure security, and related areas.
• Appraise and advise on internal controls and regulatory compliance with company policies and procedures.
• Provide practical recommendations to enhance internal controls and operational efficiency, with action plans and follow-up.
• Support the Internal Audit team in data analytics to identify insights and drive improvements.
• Stay updated on emerging IT security threats, regulatory changes, and industry best practices.
• Deliver assurance and advisory services, and conduct ad-hoc assignments as directed.

Skills

IT audit

IT risk management

Cybersecurity

Data analytics

Communication skills

Report writing

Team collaboration

Education

Bachelor’s degree in IT/CS/IS/audit

Tools

Power BI

Tableau

SAP

Job description

AVIATION SECURITY COMPANY LIMITED (AVSECO) View all jobs

Manage multi-disciplinary audits independently with focus on IT governance, IT general and application controls, cybersecurity, IT infrastructure security, and other related areas;

Appraise and advise on the adequacy of internal controls and compliance with the Company policies, procedures, and regulatory requirements;

Provide practical, value-added recommendations to enhance internal controls and operational efficiency, with action plans formulated in liaison with relevant parties and to monitor the subsequent proper implementation;

Support the Internal Audit team in data analytics to identify insights and drive initiatives aimed at improving the effectiveness and efficiency of internal audit processes;

Stay updated on emerging IT security threats, regulatory changes, and industry best practices;

Contribute to the continuous improvement of audit methodologies and practices within the Internal Audit Division; and

Deliver assurance and advisory services, and conduct ad-hoc assignments for the Company as directed.

Application Deadline: 24 Aug 2026

Job Requirements:-

• Bachelor’s degree or above in Information Technology, Computer Science, Information Systems, Auditing, or related fields;
• Professional certifications, such as Certified Information Systems Auditor (CISA), Certified Informational Security Manager (CISM), or Certified Internal Auditor (CIA) are highly preferred;
• Minimum of 5 years of relevant experience in IT audit, IT risk management, cybersecurity, and/or data security and management;
• Strong understanding of IT infrastructure, application controls, cybersecurity frameworks, and data privacy standards (e.g., ISO 27001, NIST);
• Familiarity with IT governance frameworks (e.g., COBIT, ITIL), and relevant regulatory requirements;
• Experience with data analytics tools and ERP systems, such as Power BI, Tableau, and SAP, is a plus;
• Excellent analytical and problem-solving skills;
• Strong communication and report-writing abilities;
• Excel at working independently and collaborating effectively within teams;
• High level of integrity, professionalism, and attention to detail; and
• Proficiency in both spoken and written English and Chinese.