IT Audit Manager: Lead Governance & Risk

Bupa Hong Kong; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Benefits offered by this job

Life and medical benefit

Pension plan

Annual leave

Study assistance plan

Job summary

Bupa Hong Kong's Internal Audit is seeking an IT Audit Senior to lead delivery of IT audit engagements, assess controls, and partner with business units. You will guide audit teams, ensure high standards, and adapt plans to emerging risks while maintaining independence and collaboration with senior management.

The role requires 7+ years in IT audit/risk, strong communication, and a strategic yet hands-on approach to governance, risk, and control improvements.

Qualifications

• 7+ years IT audit or IT risk management experience.
• Experience auditing IT application systems, databases and information security.
• Strong communication and influencing skills with senior stakeholders.
• Strategic thinking with tactical execution ability.
• Experience leading and coaching a team of assurance professionals.

Responsibilities

• Manage delivery of IT audit engagements from planning to reporting.
• Support business audits by assessing IT controls and providing guidance.
• Act as a true business partner with transparency and effectiveness.
• Build relationships with stakeholders to maximise effectiveness and resolve issues.
• Stay updated on developments affecting internal audit and adapt plans.
• Attend steering groups and contribute to risk-based audit planning.
• Influence the business to improve processes and controls.
• Provide leadership and coaching to the Internal Audit team.

Skills

IT governance

Risk management

Stakeholder influence

Strategic thinking

Team leadership

Education

Bachelor's degree in IT/CS/Commerce

Professional associations & memberships

Tools

COBIT

ITIL

DevOps

NIST

ISO standards

Job description

Bupa Hong Kong's Internal Audit is seeking an IT Audit Senior to lead delivery of IT audit engagements, assess controls, and partner with business units. You will guide audit teams, ensure high standards, and adapt plans to emerging risks while maintaining independence and collaboration with senior management.

The role requires 7+ years in IT audit/risk, strong communication, and a strategic yet hands-on approach to governance, risk, and control improvements.