AVP, IT Audit & Cybersecurity Leader

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) seeks an experienced IT Audit leader to drive cybersecurity-focused audits within Group Internal Audit. You will oversee planning, fieldwork, reporting, and team coaching, ensuring effective controls and risk mitigation across the IT landscape.

The role requires deep cybersecurity expertise, strong communication, and the ability to influence management while aligning with HKEX strategic objectives.

Qualifications

• At least 8 years of experience in internal or external audit, risk management, compliance or cybersecurity.
• University graduate in accounting, finance, business administration or technology.
• Hold at least one professional qualification such as CPA, CIA, CISA, CISM, CISSP, CEH, CCSP/CCAK or CSX-P.
• Strong understanding of industry cybersecurity standards (NIST CSF, ISO 27001, CIS).

Responsibilities

• Independently manage and lead IT audits with emphasis on cybersecurity from scoping to reporting.
• Develop risk-based testing strategies to evaluate control design and operating effectiveness.
• Leverage automation audit techniques to increase efficiency.
• Conduct continuous risk monitoring of cybersecurity and IT operations.
• Manage stakeholder relationships and provide risk and control advice to improve the control environment.
• Contribute to knowledge of the group’s strategy, risks, and operating platforms.
• Stay current on cybersecurity and IT trends and research industry topics.
• Engage in ad-hoc audit activities and review of change initiatives.

Skills

IT Audit

Cybersecurity

Risk Management

Stakeholder Management

Multi-tasking

Education

University graduate in Accounting/Finance/Business/Technology

Tools

NIST CSF

ISO 27001

CIS

Job description

Hong Kong Exchanges and Clearing Limited (HKEX) seeks an experienced IT Audit leader to drive cybersecurity-focused audits within Group Internal Audit. You will oversee planning, fieldwork, reporting, and team coaching, ensuring effective controls and risk mitigation across the IT landscape.

The role requires deep cybersecurity expertise, strong communication, and the ability to influence management while aligning with HKEX strategic objectives.