Officer/Associate Manager, IT Audit

ZA Bank Limited; Hong Kong; On-site; HKD 800,000 - 1,120,000; Full time

Job summary

ZA Bank Limited is seeking an IT Audit professional to perform risk assessments of the bank’s IT environment and assist in annual audit planning. You will conduct IT audits against HKMA requirements, leverage AI techniques for data analytics, and collaborate with auditors on integrated reviews.

The role focuses on risk, control assessments, and timely reporting of findings to senior management. Strong English and Chinese communication skills are essential.

Qualifications

• University graduates or above in related disciplines.
• At least 3 years of IT audit, IT controls, or IT implementation experience.
• Professional IT audit qualifications (CISA/CISSP/CISM) are advantageous.
• Strong understanding of banking industry and cyber-security regulations.
• Experience auditing cloud infrastructure is a plus.
• Excellent written and spoken English and Chinese.

Responsibilities

• Perform risk assessments of IT environment and assist in audit planning.
• Audit IT regulations and requirements (HKMA standards).
• Apply AI techniques to analyze data for audit efficiency.
• Plan and execute IT infrastructure and application audits.
• Assess risk and controls for new systems or changes; pre-implementation reviews.
• Draft and report findings, propose practical solutions.
• Follow up on audit recommendations and close issues.
• Support continuous monitoring program for IT risk changes.

Skills

IT Audit

Regulatory knowledge

Cybersecurity knowledge

Data analytics / AI

Communication skills

Bilingual English/Chinese

Education

Bachelor's degree in Engineering/Accounting/CS

Professional IT audit qualifications (CISA/CISSP/CISM)

Tools

Cloud platforms auditing

Job description

Performing risk assessments of the Digital Bank’s Information Technology environment and assisting in developing the annual audit plan

Performing IT audits of relevant regulatory requirements (e.g. HKMA SPM TM-E-1, TM-E-2, TM-G-1, TM-G-2, SA-2)

Deploying AI techniques in to analyze data to improve audit efficiency and effectiveness, ultimately be a source for analytics that business units adopt to provide business insights or for continuous auditing

Planning and executing IT infrastructure and application audits and working closely with the general auditors on integrated audits

Assessing risk, exposure and controls regarding new systems / processes or changes to the current environment and performing pre-implementation reviews where appropriate

Identifying emerging IT risks, drafting and reporting audit findings promptly to line management and senior management, and suggesting practical and innovative solutions

Following up audit recommendations post-audit, assessing residual risk, validating remedial work performed and documenting and closing issues

Performing and documenting aspects of Internal Audit’s continuous monitoring program for IT, in order to identify changes to risk assessments, audit plan

Identifying emerging IT risks and control themes to be included in management and Audit Committee presentations

Key Requirements:

• University graduates or above in related disciplines, e.g. Engineering, Accounting, Business, Computer Sciences, etc.
• At least 3 years of relevant experience in IT audit, IT controls, IT implementation/consulting
• Professional IT audit qualifications, e.g. CISA, CISSP or CISM, are added advantages.
• Good understanding of the banking industry and possess strong technical knowledge.
• Sound knowledge of cyber-security related regulatory requirements and best practices.
• Good understanding of cloud infrastructure, experience in auditing cloud platforms would be an advantage.
• Good interpersonal skills with the ability to present complex and sensitive issues to senior management, and influence change.
• Willing to learn and apply AI techniques in performing IT audit jobs to enhance audit efficiency, effectiveness and insights
• Able to work independently and proactively, demonstrating a strong sense of ownership and commitment to delivery quality audits on time.
• Confidence to deliver tough messages and engage in difficult conversations.
• Excellent verbal and written communication skills in English and Chinese.

Mandatory Reference Checking Scheme

Mandatory Reference Checking Scheme (MRC Scheme) may be applicable for certain relevant positions. It is a standardised reference-checking arrangement that is designed to support the integrity of "authorized institutions" regulated by the Hong Kong Monetary Authority (HKMA). Pursuant to the MRC scheme, our Bank will conduct a mandatory reference check by requesting information from each relevant former and current employer of applicants. For more details about the MRC Scheme, please visit the website of the Hong Kong Association of Banks: https://www.hkab.org.hk/en/page/5/mandatory-reference-checking-scheme-phase-2

ZA Bank, licensed by the HKMA in 2019, is Hong Kong's first and largest digital bank. With 800,000 users as of 30 June 2024, it leads the city's digital banking sector in customer base and deposits. ZA Bank's "Community-Driven" approach actively involves users in product development, resulting in tailored financial services for individuals, SMEs, and Web3 enterprises. The bank offers a comprehensive range of services including banking, investment, insurance, and business solutions. ZA Bank continues to innovate in Hong Kong's financial landscape. It operates as a subsidiary of ZA Global, established in 2017, to explore global fintech and insurtech opportunities.

Hong Kong Island, HK