IT Audit Lead – Technology & Cybersecurity, Regional Bank

ALL-STAR AGENCY; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

All Star Agency is seeking an IT Audit Lead to join its Asia-Pacific team in Hong Kong. The role involves leading and delivering risk-based IT and Information Systems audits across the region, evaluating technology controls, cybersecurity safeguards and IT governance frameworks.

The ideal candidate will have extensive experience in IT audit, information systems, technology risk or cybersecurity assurance, with strong English communication and stakeholder management skills.

Qualifications

• Experience leading IT and Information Systems audits in financial services.
• Strong knowledge of IT general controls, cybersecurity and cloud.
• Excellent stakeholder management and communication in English.

Responsibilities

• Lead end-to-end IT/IS audit engagements (planning, fieldwork, testing, reporting).
• Assess design and operating effectiveness of IT/IS controls; identify weaknesses and improvements.
• Deliver work per Internal Audit standards, policies and regulatory expectations.
• Support regional/global IT and Cybersecurity audit programs and reviews of cloud and digital banking.
• Apply data analytics to assess control environment and risk trends.
• Build relationships with management across IT/IS functions and contribute to risk assessments.

Skills

IT audit

Cybersecurity

Stakeholder management

IT controls

Data analytics

English communication

Education

Bachelor's degree in IT/CS/Accounting/Finance

Job description

Join a leading international financial institution as IT Audit Lead. You will lead and deliver risk-based IT and Information Systems audit engagements across the region, assessing the effectiveness of technology controls, cybersecurity safeguards and IT governance frameworks.

About the Role

This role suits an experienced IT audit or technology-risk professional who can independently manage audit assignments, engage senior stakeholders and provide practical recommendations that strengthen the Bank's control environment. You will work within the Asia Pacific Internal Audit function, supporting regional and global IT and Cybersecurity audit initiatives, with broad exposure to application controls, IT infrastructure, cloud, digital banking, artificial intelligence, IT service management and system development life-cycle controls.

You will build strong working relationships with technology, information-security, operations and business stakeholders across the region, while contributing to risk assessment, continuous monitoring and strategic audit initiatives. Occasional regional travel will be required.

Key Responsibilities

• Lead and execute end-to-end IT and IS audit engagements, including planning, risk assessment, fieldwork, testing, reporting, issue validation, remediation follow-up and closure.
• Assess the design and operating effectiveness of IT and Information Systems controls, identifying emerging risks, control weaknesses and practical opportunities for improvement.
• Deliver audit work in accordance with the Bank's Internal Audit methodology, professional audit standards, internal policies and applicable regulatory expectations.
• Support regional and global IT and Cybersecurity audit programmes, including reviews of cybersecurity, applications, infrastructure, cloud, digital banking, IT service management and technology projects.
• Apply data analytics and continuous-monitoring techniques to assess the control environment, identify risk trends and enhance the quality and coverage of audit work.
• Build effective relationships with management across assigned IT and IS functions, contribute to annual risk assessments and participate in Internal Audit strategic initiatives and global projects.

Requirements

• University degree in Information Technology, Information Systems, Computer Science, Cybersecurity, Accounting, Finance or a related discipline, together with a recognized professional qualification such as CISA, CIA, CPA, AIGP, AAIA or equivalent.
• At least 8 years of relevant experience in IT audit, Information Systems audit, technology risk, cybersecurity assurance or IT controls, preferably gained within banking or financial services.
• Strong knowledge of IT audit domains, including cybersecurity, IT general controls, application controls, IT infrastructure, cloud, digital banking, artificial intelligence, IT service management, technology strategy and the system development life cycle.
• Familiarity with Asia Pacific technology-risk and cybersecurity regulatory requirements, including supervisory expectations from the Hong Kong Monetary Authority and Monetary Authority of Singapore.
• Good understanding of technology controls and operational-risk considerations across banking products and processes, including Payments, e-Banking, Treasury, Corporate Banking and Structured Finance.
• Strong analytical, planning, organisational, project-management and stakeholder-management skills, with the ability to work independently and communicate effectively in spoken and written English.