IT Audit Associate: Risk & Controls Expert

eFinancialCareers Ltd.; Hong Kong; On-site; HKD 520,000 - 800,000; Full time

Job summary

HKEX in Hong Kong is seeking an Associate in IT Audit to perform high-quality IT audits across the Group. You will work within the Group Internal Audit to test controls, conduct walkthroughs, and report audit issues, helping safeguard assets and strengthen the control culture.

The role requires 5+ years of relevant experience and professional qualifications; candidates should understand NIST, ISO 27001 and CIS, and communicate well with stakeholders.

Qualifications

• At least 5 years of work experience in internal or external audit, risk management, compliance, cybersecurity or related function.
• A university graduate of relevant disciplines (e.g. Accounting, Finance, Business Administration, Technology, etc.).
• Possess at least one relevant professional qualification such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP / CCAK, CSX-P or other security related qualifications.
• Good understanding of industry cybersecurity standards such as NIST Cybersecurity Framework, ISO 27001, CIS, etc.
• Good communication and relationship management skills.

Responsibilities

• Independently conduct risk-based audits. Support the entire audit life cycle through walkthroughs, control testing, and write-ups for audit issues and reports.
• Identify and escalate potential audit issues and root causes to the Auditor-in-Charge and GIA management for resolution.
• Contribute to continuous risk monitoring and assessment of IT / business operations to identify emerging/high risk areas.
• Provide advice to stakeholders to improve the Group's control environment.
• Prepare materials for senior management, Audit Committee and regulators.

Job description

HKEX in Hong Kong is seeking an Associate in IT Audit to perform high-quality IT audits across the Group. You will work within the Group Internal Audit to test controls, conduct walkthroughs, and report audit issues, helping safeguard assets and strengthen the control culture.

The role requires 5+ years of relevant experience and professional qualifications; candidates should understand NIST, ISO 27001 and CIS, and communicate well with stakeholders.