IT Audit Associate: Strengthen Controls & Risk Insight

Hong Kong Exchanges & Clearing Ltd; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Hong Kong Exchanges & Clearing Ltd. seeks an Associate in Group Internal Audit to perform risk-based IT audits across the HKEX Group, reporting to the Head of IT Audit.

You will independently conduct walkthroughs, testing, and issue writing, while staying abreast of industry cybersecurity trends and contributing to audit methodology. The role requires at least 5 years in internal audit or related fields, a university degree, and professional certifications such as CPA/CISA/CISM.

Qualifications

• At least 5 years of work experience in internal audit, risk, compliance, or related roles.
• University graduate in Accounting, Finance, Business Administration, Technology, etc.
• Hold at least one professional qualification such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP/CCAK, CSX-P or similar.
• Strong understanding of cybersecurity standards (NIST CSF, ISO 27001, CIS).
• Good knowledge of IT risks, controls, assessment practices and IT security tools.
• Team-oriented with ownership and accountability.
• Ability to multi-task in a fast-changing environment.

Responsibilities

• Perform high-quality IT audits following GIA’s methodology.
• Conduct walkthroughs, control testing and document audit issues.
• Validate prior audit issues in a timely manner.
• Identify issues and communicate to Auditor-in-Charge and management.
• Develop knowledge of governance, business, processes, technology and risk management.
• Assist in risk monitoring of IT/business operations and advise on control improvements.
• Stay updated on industry trends to enhance audit coverage.
• Support departmental initiatives to improve audit methodology.
• Prepare materials for the Audit Committee, regulators and senior management.

Skills

IT audit

Risk management

Audit methodologies

Communication

Education

University degree in Accounting/Finance/Business/Technology

Tools

NIST CSF

ISO 27001

CIS

Job description

Hong Kong Exchanges & Clearing Ltd. seeks an Associate in Group Internal Audit to perform risk-based IT audits across the HKEX Group, reporting to the Head of IT Audit.

You will independently conduct walkthroughs, testing, and issue writing, while staying abreast of industry cybersecurity trends and contributing to audit methodology. The role requires at least 5 years in internal audit or related fields, a university degree, and professional certifications such as CPA/CISA/CISM.