IT Audit - Senior Manager

Protiviti Hong Kong; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Protiviti Hong Kong is seeking a Manager/Senior Manager for Technology Audit and Advisory. You will lead IT audit, risk, data privacy and regulatory engagements for financial services clients, assess controls, and deliver clear reports to senior management.

You will manage project lifecycles, mentor junior staff, and contribute to business development while building trusted client relationships in a Hong Kong APAC context.

Qualifications

• Bachelor’s degree in IT/related field.
• 7+ years in IT audit, risk, controls or cybersecurity in financial/professional services.
• Experience leading IT audit and technology risk engagements with senior stakeholders.
• Strong knowledge of IT governance, IT general controls, security and data protection.
• Familiarity with HK regulatory requirements and frameworks (NIST/ISO 27001).
• Certifications such as CISA, CISSP, CISM, CIA or CRISC required.
• Excellent written and spoken English and Cantonese; Mandarin a plus.

Responsibilities

• Lead IT audit and technology risk engagements for banks and financial institutions.
• Assess design and operating effectiveness of technology controls.
• Develop practical, risk-based recommendations and client deliverables.
• Manage project lifecycle, budgeting, planning, and quality assurance.
• Build client relationships and support business development.
• Coach junior team members and promote continuous learning.

Skills

IT audit

Technology risk

Regulatory compliance

Stakeholder management

Report writing

Project management

Team leadership

Business development

Education

Bachelor's degree in Information Systems/IT/Finance/Business Management or related

Tools

CISA

CISSP

CISM

CIA

CRISC

ISO 27001 Lead Auditor

NIST

ISO 27001

Job description

About Our Technology Audit and Advisory Services:

Organizations face growing technology risks, regulatory expectations and operational costs. However, technology risk and its potential business impact are not always fully considered in business decision-making. Our Technology Audit and Advisory services help clients understand their technology risk exposure and enhance the effectiveness of their governance, controls and resilience. We are seeking candidates for Manager / Senior Manager.

Major Responsibilities:

• Lead and manage IT audit, IT SOX, technology risk, data privacy and regulatory compliance engagements for banks, securities firms, insurers, asset managers and multinational organizations.
• Assess the design and operating effectiveness of technology controls and evaluate client control environments against regulatory requirements, industry standards and leading practices.
• Lead technology governance, cybersecurity and regulatory compliance reviews with reference to applicable Hong Kong regulatory requirements and recognized frameworks, including NIST and ISO 27001.
• Identify control gaps, root causes and improvement opportunities, and develop practical, proportionate and risk-based recommendations.
• Prepare and review clear reports, presentations and other client deliverables, and communicate findings and recommendations to senior management and relevant stakeholders.
• Manage engagements throughout the project lifecycle, including scoping, work planning, resource allocation, budgeting, progress monitoring, quality assurance and delivery risk management.
• Build trusted client relationships, manage stakeholder expectations and support the Managing Director and senior leaders in maintaining strong client relationships.
• Support business development by identifying client needs, preparing proposals and offerings, participating in pitches and contributing to go-to-market initiatives.
• Supervise, coach and develop junior team members, promoting high-quality delivery and continuous learning.
• Develop internal networks and maintain strong relationships with colleagues across Protiviti in Hong Kong and APAC.

Required Experience and Qualifications

• Bachelor’s degree in Information Systems, Information Technology, Finance, Business Management or a related discipline.
• Minimum 7 years of relevant experience in IT audit, technology risk, IT controls or cybersecurity, preferably within financial services and/or professional services.
• Demonstrated experience leading IT audit and technology risk engagements and managing senior client stakeholders.
• Strong knowledge of IT governance, IT general controls, application controls, system and network security, cloud risk, outsourcing, data protection, third-party risk and business continuity.
• Strong knowledge of Hong Kong financial services regulatory requirements relating to technology and cybersecurity risk, including those issued by the HKMA, SFC and Insurance Authority, and familiarity with NIST and ISO 2700.
• Experience or knowledge in AI governance, AI risk management and related audit reviews is an advantage.
• Must have industry knowledge in financial services
• Industry knowledge in manufacturing, retail, construction and/or transportation companies is an advantage.
• Professional certification such as CISA, CISSP, CISM, CIA, CRISC, ISO 27001 Lead Auditor and/or another relevant certification is a must
• Excellent written and spoken English and Cantonese. Fluency in Mandarin is an advantage