IT Audit & Security Assurance Lead

AVIATION SECURITY COMPANY LIMITED (AVSECO); Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

AVIATION SECURITY COMPANY LIMITED (AVSECO) in Hong Kong seeks an experienced IT Audit professional to lead multi-disciplinary audits focused on IT governance, IT general and application controls, cybersecurity, and data security across the organization.

The role appraises internal controls, provides actionable recommendations, supports data analytics initiatives, and stays updated on regulatory changes and industry best practices.

Qualifications

• Bachelor’s degree or above in IT, CS, IS, auditing, or related fields.
• Professional certifications such as CISA, CISM, CIA are highly preferred.
• Minimum of 5 years of relevant IT audit, IT risk management, cybersecurity, and/or data security experience.
• Familiarity with IT governance frameworks (COBIT/ITIL) and regulatory requirements.

Responsibilities

• Manage multi-disciplinary audits independently with focus on IT governance, IT general and application controls, cybersecurity, IT infrastructure security, and related areas.
• Appraise and advise on internal controls and regulatory compliance with company policies and procedures.
• Provide practical recommendations to enhance internal controls and operational efficiency, with action plans and follow-up.
• Support the Internal Audit team in data analytics to identify insights and drive improvements.
• Stay updated on emerging IT security threats, regulatory changes, and industry best practices.
• Deliver assurance and advisory services, and conduct ad-hoc assignments as directed.

Skills

IT audit

IT risk management

Cybersecurity

Data analytics

Communication skills

Report writing

Team collaboration

Education

Bachelor’s degree in IT/CS/IS/audit

Tools

Power BI

Tableau

SAP

Job description

AVIATION SECURITY COMPANY LIMITED (AVSECO) in Hong Kong seeks an experienced IT Audit professional to lead multi-disciplinary audits focused on IT governance, IT general and application controls, cybersecurity, and data security across the organization.

The role appraises internal controls, provides actionable recommendations, supports data analytics initiatives, and stays updated on regulatory changes and industry best practices.