Principal / Senior Manager – IT Advisory (Risk Advisory Services)

BDO Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

BDO Limited in Hong Kong seeks a Principal/Senior Manager for IT Advisory (Risk Advisory Services). You will lead IT risk, control, and cybersecurity engagements, evaluating IT security controls across hardware and applications and advising on data protection and governance.

You will coordinate cross-border projects, develop quality reports, and support business development while staying aligned with the firm’s values and global vision. Travel to China and other countries may be required.

Qualifications

• 10 years or above experience in information security, IT audit, data security or privacy and technology risk management.
• A degree holder in Information Systems, computer science or equivalent experience.
• Industrial experience should include manufacturing, securities and financial institutions, e-commerce, etc.
• Experience in the detection and response to cybersecurity incidents.
• Experience in design, implementation and architecture of enterprise solutions such as SAP, Oracle, Netsuite, etc.
• Experience in developing and maintaining IT policies, procedures, standards and guidelines.
• Certifications in information security (e.g., ITIL v3, ISO27001, ISC2, ISACA, CISSP, CISA, CISM, CDPSE or CEH) would be a plus.
• Knowledge of international information security standards (e.g., COBIT, ISO 27001, NIST, PCI).
• Knowledge in programming languages relevant to mobile apps or web-based software.
• Knowledgeable in security technologies including blockchain, AI, RPA, authentication, threat management, and penetration testing.

Responsibilities

• Lead IT risk and cybersecurity engagements for IT controls review.
• Act as SME in relation to IT risk, control and cybersecurity.
• Conduct risk assessments and provide data protection recommendations.
• Conduct cybersecurity engagements including penetration testing and vulnerability scanning.
• Conduct IT audit engagements and ERP/ financial system implementation reviews.
• Support detection and response to cybersecurity incidents.
• Deliver security awareness training to promote risk-aware culture.
• Coordinate engagements across groups and geographies; produce quality reports and proposals.
• Plan and execute business development activities.

Skills

Information security

IT audit

Data security

Privacy

Technology risk management

Risk assessments

Cybersecurity

Cyber incident detection and response

Security awareness training

Business development

Project leadership

IT policies, procedures, standards

Security certifications (e.g. CISSP, C

Education

Degree in Information Systems / Computer Science

Tools

SAP

Oracle

Netsuite

Job description

Principal / Senior Manager – IT Advisory (Risk Advisory Services)

Lead projects in IT review include evaluating the design and operation of IT security controls of hardware and applications

Act as a subject matter expert in relation to IT risk, control and cybersecurity

Conduct and review risk assessments, and provides recommendations for appropriate data protection and system security

Conduct and review cybersecurity related engagements including penetration test and vulnerability scanning

Conduct and review IT audit engagements

Conduct and review ERP or financial reporting system implementation engagements

Provide support in the detection and response to cybersecurity incidents

Run security awareness training to promote risk-aware culture

Coordinate and conduct engagements across multiple groups and geographical locations

Produce quality working papers, draft quality reports and proposals

Plan and execute business development activities

Travel to China and other countries on project basis

Other ad-hoc tasks as assigned by supervisors

Support and act towards the BDO Global Vision and the Mission of the Firm

Be committed to act with the Firm’s core values and competency expectations

What you'll bring

10 years or above experience in information security, IT audit, data security or privacy and technology risk management

A degree holder in Information Systems, computer science or equivalent experience

Industrial experience should include manufacturing, securities and financial institutions, e-commerce, etc.

Experience in the detection and response to cybersecurity incidents

Experience in design, implementation and architecture of enterprise solutions such as SAP, Oracle, Netsuite, etc.

Experience in developing and maintaining IT policies, procedures, standards and guidelines

Certified in Information (Technology) Security (e.g. ITIL v3, ISO27001, ISC2, ISACA, CISSP, CISA, CISM, CDPSE or CEH accreditations) would be considered a plus

Sound knowledge of international information security standards (e.g., COBIT, ISO 27001, NIST, PCI, etc.)

Knowledge in programming languages relevant to mobile applications or web-based software

Knowledgeable in security technologies including block chain, Artificial intelligence, Robotic Process automation, authentication mechanism, threat management, application/ system/ network/ database security, cryptography, vulnerability, scanning and penetration testing

We are an equal opportunity employer, and offer excellent prospects and career development for the right candidate.

Applications will be treated in strict confidence. Personal data collected will be used for recruitment purposes only.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

Your application will include the following questions:

• Which of the following statements best describes your right to work in Hong Kong?
• Which of the following languages are you fluent in?

We’re BDO, a global network connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals and grow.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career – with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

We’re BDO, a global network connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals and grow.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career – with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

Optimum Solutions (Hong Kong) Limited

Kowloon City, Kowloon City District, HK

1d ago

What can I earn as an Information Technology Manager