Associate, Information Technology Audit

Hong Kong Exchanges & Clearing Ltd; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Hong Kong Exchanges & Clearing Ltd. seeks an Associate in Group Internal Audit to perform risk-based IT audits across the HKEX Group, reporting to the Head of IT Audit.

You will independently conduct walkthroughs, testing, and issue writing, while staying abreast of industry cybersecurity trends and contributing to audit methodology. The role requires at least 5 years in internal audit or related fields, a university degree, and professional certifications such as CPA/CISA/CISM.

Qualifications

• At least 5 years of work experience in internal audit, risk, compliance, or related roles.
• University graduate in Accounting, Finance, Business Administration, Technology, etc.
• Hold at least one professional qualification such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP/CCAK, CSX-P or similar.
• Strong understanding of cybersecurity standards (NIST CSF, ISO 27001, CIS).
• Good knowledge of IT risks, controls, assessment practices and IT security tools.
• Team-oriented with ownership and accountability.
• Ability to multi-task in a fast-changing environment.

Responsibilities

• Perform high-quality IT audits following GIA’s methodology.
• Conduct walkthroughs, control testing and document audit issues.
• Validate prior audit issues in a timely manner.
• Identify issues and communicate to Auditor-in-Charge and management.
• Develop knowledge of governance, business, processes, technology and risk management.
• Assist in risk monitoring of IT/business operations and advise on control improvements.
• Stay updated on industry trends to enhance audit coverage.
• Support departmental initiatives to improve audit methodology.
• Prepare materials for the Audit Committee, regulators and senior management.

Skills

IT audit

Risk management

Audit methodologies

Communication

Education

University degree in Accounting/Finance/Business/Technology

Tools

NIST CSF

ISO 27001

CIS

Job description

We’re home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "ToConnect,PromoteandProgressour Markets and the Communities they support for the prosperity of all."

Job Summary:

Group Internal Audit (GIA) support the HKEX Group in achieving its business objectives, safeguarding its assets and reputation, and raising its control culture awareness through the provision of objective, independent and insightful assurance the Board and Senior Management. GIA report directly to the HKEX Audit Committee and administratively to the Group Chief Executive.

Job Duties:

Responsibilities:

The Associate, IT Audit is responsible to perform high quality IT audits for the Group in accordance with GIA’s audit methodology, and to support and contribute to departmental initiatives. The role reports to the Head of IT Audit. The detailed responsibilities of this role are:

Independently conduct risk-based audits and contribute throughout the audit life cycle including conducting walkthrough meetings and control testing and write quality audit issues / report.

Independently perform validation of prior audit issues in an effective and timely manner.

Identify and escape key issues noted to the Auditor-in-Charge and GIA management for resolution and action.

Develop and maintain a good knowledge of the company’s governance, business, process, technology and risk management.

Contribute to the continuous risk monitoring and assessment of IT / business operations to identify emerging and high risk areas for coverage. Provide advice and insight to stakeholders to improve the Firm’s control environment.

Stay current of the industry development, business and IT trends, including conducting research on industry and risk topics to increase effectiveness of audit coverage and GIA’s ability to add value to the Firm..

Participate and contribute in departmental initiatives aimed at improving GIA’s audit methodology.

Support the preparation of materials for the Audit Committee, regulators and senior management.

Requirements:

At least 5 years of work experience from an internal audit / risk / compliance role or other relevant function or an accounting / consulting firm.

A university graduate of relevant disciplines (e.g. Accounting, Finance, Business Administration, Technology, etc.)

Possess at least one relevant professional qualification such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP / CCAK, CSX-P or other security related qualifications.

Good understanding of industry cybersecurity standards such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, ISO 27001, CIS, etc.

Good understanding of the underlying IT risks, application controls, assessment practices and various IT security software, operating systems, databases, telecommunication and networking technologies.

Team-oriented with a strong sense of ownership and individual accountability.

Highly motivated with the ability to multi-task and remain organized.

Demonstrate agility and the ability to drive and adapt to changes in a fast-changing environment.

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.