Senior Auditor - IT & Cybersecurity Audit

Tenth Revolution Group; Hong Kong Island; On-site; HKD 480,000 - 560,000; Full time

Job summary

Tenth Revolution Group in Hong Kong seeks an experienced Senior Auditor - IT & Cybersecurity to join a well-established regional organization with broad exposure across IT audit, cybersecurity, cloud, technology risk and governance. You will plan and execute audits, review controls and provide practical recommendations to strengthen technology risk management.

The role offers opportunities to work on regional audit projects, engage with diverse technology and business stakeholders, and travel up

Qualifications

• 3–5 years of IT Audit or related field.
• Strong ITGC testing and technology control assessment.
• Knowledge of COBIT, ISO 27001/27002, NIST CSF, CIS Controls and/or ITIL.
• Experience with IAM/PAM, network security, vulnerability management, monitoring and incident response.
• Cloud technologies and cloud security knowledge is advantageous.
• CISA, CISSP and/or CISM preferred.
• Strong analytical, communication and stakeholder management skills.
• Willing to travel up to 30% regionally/internationally.

Responsibilities

• Plan and execute IT & Cybersecurity audit engagements across regional operations.
• Perform audits covering ITGC, cybersecurity, network security, IAM/PAM, cloud security, data centre, technology governance and IT risk management.
• Conduct walkthroughs, control testing and data analysis to identify technology risks and control weaknesses.
• Review IT resilience and operational controls, including backup/recovery, DR/BCP, patching, configuration and infrastructure monitoring.
• Assess technology project and application controls covering SDLC, DevSecOps, CI/CD, change/release management and environment segregation.
• Review cloud environments including Azure, AWS, Microsoft 365, IaaS/PaaS/SaaS and hybrid infrastructure.
• Prepare clear audit findings and provide practical, value-added recommendations to management.
• Monitor remediation progress and conduct follow-up reviews on outstanding audit issues.
• Support multiple audit engagements concurrently and provide guidance to junior team members.
• Participate in regional/international audit assignments where required.

Skills

IT Audit

Technology Risk

Cybersecurity

Cloud Security

ITGC testing

COBIT

ISO 27001

NIST CSF

CISA

CISSP

CISM

IAM/PAM

Education

Degree in Information Systems

Job description

Senior Auditor - IT & Cybersecurity Audit

We are looking for an experienced Senior Auditor - IT & Cybersecurity to join a well-established organization with regional operations.

This role offers broad exposure across IT audit, cybersecurity, cloud, technology risk and governance, with opportunities to work on regional audit projects and engage with different technology and business stakeholders.

Key Responsibilities

• Plan and execute IT & Cybersecurity audit engagements across regional operations.
• Perform audits covering IT General Controls (ITGC), cybersecurity, network security, IAM/PAM, cloud security, data centre, technology governance and IT risk management.
• Conduct walkthroughs, control testing and data analysis to identify technology risks and control weaknesses.
• Review IT resilience and operational controls, including backup/recovery, DR/BCP, patching, configuration and infrastructure monitoring.
• Assess technology project and application controls covering SDLC, DevSecOps, CI/CD, change/release management and environment segregation.
• Review cloud environments including Azure, AWS, Microsoft 365, IaaS/PaaS/SaaS and hybrid infrastructure.
• Prepare clear audit findings and provide practical, value-added recommendations to management.
• Monitor remediation progress and conduct follow-up reviews on outstanding audit issues.
• Support multiple audit engagements concurrently and provide guidance to junior team members.
• Participate in regional/international audit assignments where required.

Requirements

• Degree in Information Systems, Computer Science, Cybersecurity, Accounting or a related discipline.
• Around 3-5 years of experience in IT Audit, Technology Risk, Technology Assurance or a related field.
• Strong hands-on experience in ITGC testing and technology control assessment.
• Good understanding of frameworks such as COBIT, ISO 27001/27002, NIST CSF, CIS Controls and/or ITIL.
• Knowledge of cybersecurity controls including IAM/PAM, network security, vulnerability management, security monitoring, incident response and data protection.
• Exposure to cloud technologies and cloud security would be highly advantageous.
• CISA, CISSP and/or CISM certification is preferred.
• Strong analytical, communication and stakeholder management skills.
• Able to work independently and manage multiple audit assignments.
• Willing to travel up to 30% regionally/internationally.

Why Join?

• Regional exposure across different business and technology environments.
• Broad audit coverage across IT, cybersecurity, cloud and emerging technology risks.
• Opportunity to work closely with senior technology and business stakeholders.
• Career development within a sizable and established organization.