Associate, Information Technology Audit

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) invites an Associate, IT Audit to perform high quality IT audits for the Group in accordance with GIA’s methodology and to support departmental initiatives. The role reports to the Head of IT Audit and collaborates closely with stakeholders to strengthen the Group’s control environment.

The ideal candidate has 5+ years in audit/risk/compliance or related fields, holds a relevant university degree, and possesses professional qualifications such as

Qualifications

• At least 5 years of work experience in internal/external audit, risk management, compliance, cybersecurity or related function.
• University degree in Accounting, Finance, Business Administration, Technology or related field.
• Professional qualifications such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP / CCAK, CSX-P or similar.
• Understanding of cybersecurity standards (NIST CSF, ISO 27001, CIS, etc.).
• Understanding of IT & cybersecurity risks, controls, assessment practices and IT security technologies.
• Team-oriented with ownership and accountability.
• Independent, proactive, and able to multitask in a fast-changing environment.
• Strong communication and relationship management skills.
• Experience leveraging data and technology is an advantage.

Responsibilities

• Independently conduct risk-based audits.
• Support the full audit life cycle with walkthroughs, control testing and write-ups.
• Identify and elevate potential audit issues and root causes with stakeholders.
• Contribute to ongoing risk monitoring of IT and business operations.
• Provide insight to improve the Group’s control environment.
• Develop knowledge of strategy, products, risk management and platforms.
• Stay current on industry trends and conduct topic research.
• Validate remediation of audit issues and monitor progress.
• Participate in initiatives to improve GIA’s audit methodology.
• Assist in preparing materials for senior management, Audit Committee and regulators.

Skills

Audit experience

Cybersecurity concepts

IT risk awareness

Communication skills

Multi-tasking & organization

Data & technology leverage

Agility in fast-changing environment

Education

University graduate in Accounting/Finance/Business/Tech

Professional qualification (CPA/CIA/CFA/FRM/CISA/CISM/CISSP/CEH/CCSP/CSX-P)

Tools

Security software

Job description

Company Introduction

We’re home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary

Group Internal Audit (GIA) supports the HKEX Group in achieving its business objectives, safeguarding its assets and reputation, and raising its control culture awareness through the provision of objective, independent and insightful assurance to the Board and senior management. GIA reports directly to the HKEX Audit Committee and administratively to the Group Chief Executive Officer. The Associate, IT Audit is responsible for performing high quality IT audits for the Group in accordance with GIA’s audit methodology, and supporting and contributing to departmental initiatives. The role reports to the Head of IT Audit.

Job Responsibilities

• Independently conduct risk-based audits.
• Support the entire audit life cycle through conducting walkthrough meetings, performing control testing and preparing write-up for audit issues and reports.
• Identify and elevate potential audit issues and root causes to the Auditor-in-Charge and GIA management for resolution.
• Contribute to the continuous risk monitoring and assessment of IT / business operations to identify emerging/ high risk areas for coverage.
• Provide advice and insight to stakeholders to improve the Group’s control environment.
• Develop good knowledge of the Group’s strategy, products, risk management processes and operating platforms.
• Stay current of the industry development, business and IT trends.
• Conduct research on industry and risk topics to increase effectiveness of audit coverage and GIA’s ability to add value to the Group.
• Validate remediation of audit issues in an effective and timely manner.
• Participate and contribute to departmental initiatives such as continuous improvement of GIA’s audit methodology.
• Support the preparation of materials for senior management, Audit Committee and regulators.

Job Requirements

• At least 5 years of work experience from an internal or external audit, risk management, compliance, cybersecurity role or other relevant function or an accounting / consulting firm.
• A university graduate of relevant disciplines (e.g. Accounting, Finance, Business Administration, Technology, etc.).
• Possess at least one relevant professional qualification such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP / CCAK, CSX-P or other security related qualifications.
• Good understanding of industry cybersecurity standards such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, ISO 27001, CIS, etc.
• Good understanding of the underlying IT & cybersecurity risks, application controls, assessment practices and various IT security software, operating systems, databases, cloud, networking technologies and emerging technology risks.
• Team-oriented with a strong sense of ownership and individual accountability.
• Independent and motivated with the ability to multi-task and remain organized.
• Demonstrate agility and the ability to operate in a fast-changing environment.
• Good communication and relationship management skills.
• Experience in leveraging data and technology an advantage.

Equality and Diversity

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location & Working Hours

Location: HKEX - Exchange Square Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40

Worker Type: Permanent

Company Profile

Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world’s leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange. As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through its pioneering Connect schemes, increasingly diversified product ecosystem and its deep, liquid and international markets. HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all.