IT Principal / IT Director, Risk Advisory Services

mazars-talent; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Benefits offered by this job

Medical and dental insurance

Life insurance

5-day working week

Discretionary performance bonus

Birthday leave

Marriage leave

Employee activities

Job summary

Forvis Mazars in Hong Kong seeks an senior IT Audit / Risk Advisory leader to drive IT risk assessments, control reviews and strategic advisory engagements. You will manage complex IT audit programs, lead teams, and communicate findings to clients and senior management with confidence.

You should have 10+ years in IT audit or cybersecurity, professional qualifications (CISA/CPA), and strong English and Mandarin skills; willingness to travel frequently is required.

Qualifications

• Bachelor’s degree in computer science, information management or accounting.
• Minimum 10 years of experience in IT audit, cybersecurity, IT information security or IT risk.
• Professional qualifications: CISA and/or CPA preferred.
• Excellent written and spoken English; Mandarin is a plus.
• Strong teamwork and communication; willingness to travel.

Responsibilities

• Direct and oversee IT risks and controls analysis, providing high level risk reduction recommendations.
• Lead benchmarking with IT risk frameworks (NIST, ISO, COBIT, etc.) for strategic advisory.
• Manage scoping, budgeting and delivery risk; perform final quality reviews.
• Supervise project teams and present critical IT audit findings to senior management.
• Coordinate IT general and application controls audit support for external audits.
• Define objectives, scope, and extent of major IT audit engagements; ensure timely completion.
• Lead security and vulnerability assessments and oversee compliance monitoring.
• Advise business units on security requirements and control effectiveness.

Skills

IT Audit

Cybersecurity

IT Risk

Risk frameworks

CISA

CPA

English

Mandarin Chinese

Travel

Education

Bachelor’s degree in computer science, Information Management, Accounting

Job description

Why Join Us

Forvis Mazars is a leader in audit, tax and advisory services worldwide, operating across 100+ countries and territories. Join us to grow your career through global opportunities, diverse projects, and continuous learning. Belong to a supportive environment where your unique perspective is valued, and success comes from teamwork. Impact with your bold ideas and help drive us forward.

Risk Advisory Services team provides a wide range of consultancy services, including internal control review, enterprise risk management, compliance review, IT Audit and ESG reporting etc. Join our Risk Advisory Services team in building the resilience our clients need to protect their long-term performance.

What you can expect

• Direct and oversee the analysis and evaluation of client’s IT risks and controls, providing high-level IT risk reduction recommendations and leading the implementation of complex solutions
• Lead benchmarking and gap analysis with IT risk-related industry frameworks (e.g., NIST, ISO, COBIT, C-RAF, etc.) to provide strategic advisory to client leadership
• Take accountability for scoping, financial management, and delivery risk management, while performing the final quality review of all deliverables
• Supervise and mentor project teams to deliver value-added assurance and advisory services to clients
• Present and communicate critical IT audit findings and strategic business risks to senior management and clients
• Manage and coordinate IT general controls and application controls audit support to external audit
• Define the objectives, scope, and extent of major IT audit engagements, ensuring all projects are professionally and efficiently completed within deadlines
• Lead security and vulnerability assessments and oversee compliance monitoring reviews to identify control weaknesses and recommend remedial actions
• Serve as a strategic advisor to business units and IT groups to assess security requirements and controls
• Enforce security control policies and governance frameworks across client organizations

Who we are looking for

• Bachelor’s degree in computer science, Information Management, Accounting, or other related disciplines
• Minimum 10 years’ experience gained within IT Audit, Cybersecurity, IT Information Security or IT Risk
• Professionally qualified in CISA, CPA other specialist skills/qualifications
• Strong command of written and oral communication skills (English, Mandarin & Chinese)
• Strong teamwork ability and able to work independently
• Good interpersonal, communication and problem-solving skills
• Frequent travel

*Candidates with more experience will be considered for the position of IT Director

What We Offer

Choosing the right start is the first step to a promising career path. We recognise that rewards are important to you. On top of the base salary you will be receiving, we offer a range of staff caring benefits and policies including medical and dental insurance, life insurance, a 5-day working week, discretionary performance bonus, birthday leave, marriage leave and employee activities.

Please apply with detailed resume, university transcript, HKDSE / public examination certificates and/or transcript, current salary, expected salary and earliest availability.

All personal data collected would be for recruitment purposes only.