IT Audit Manager - Security & Governance Leader

Nanyang Commercial Bank Ltd.; Hong Kong; On-site; HKD 550,000 - 750,000; Full time

Job summary

Nanyang Commercial Bank Ltd. in Hong Kong is seeking a senior IT audit professional to lead and conduct IT infrastructure and application audits within a banking environment.

You will participate in IT governance reviews, provide advisory on IT management, security and outsourcing, and drive improvements to internal controls. The role requires at least 5 years of IT security or audit experience, professional qualifications (CISA/CISM/CISSP/PMP), and strong data analytics skills using CAATs,

Qualifications

• Bachelor’s degree or above in IT, Computer Science
• At least 5 years of experience in IT security or audit, preferably in Banking and Financial industry
• Relevant professional qualifications (e.g. CISA, CISM, CISSP, PMP)
• Experience in using CAATs (e.g. ACL), Data Analytics (R, Power BI), RPA, code review or network security techniques will be an advantage
• Mature, independent and with strong analytical and interpersonal skills
• Good command in both written and spoken English and Chinese, including Putonghua

Responsibilities

• Plan, lead and conduct IT infrastructure and application audit assignment;
• Involve in IT governance reviews and technical assessments, and recommend internal control improvements;
• Provide consultancy advice on IT management, security and outsourcing;
• Enhance audit process and proficiency through implementing audit standards, methodologies, and techniques;
• Take up ad-hoc projects as required.

Skills

IT audit

IT security

Data analytics

Communication

Education

Bachelor’s degree in IT, Computer Science, Accounting

Tools

ACL / CAATs

Power BI

R

Job description

Nanyang Commercial Bank Ltd. in Hong Kong is seeking a senior IT audit professional to lead and conduct IT infrastructure and application audits within a banking environment.

You will participate in IT governance reviews, provide advisory on IT management, security and outsourcing, and drive improvements to internal controls. The role requires at least 5 years of IT security or audit experience, professional qualifications (CISA/CISM/CISSP/PMP), and strong data analytics skills using CAATs,