Senior Information Security Audit Manager

Standard Chartered Bank; Hong Kong; On-site; HKD 180,000 - 260,000; Full time

Job summary

Standard Chartered Bank is seeking a Senior Audit Manager to join the Information and Cyber Security (ICS) team within Group Internal Audit & Investigations (GIAI). The role requires extensive expertise in identity and access management, vulnerability management, code security, security operations, threat intelligence, red/purple teaming, and NIST/CIS standards, with strong risk management experience.

The ideal candidate will lead high-risk audits, supervise audit teams, and drive the use of AI

Qualifications

• 12+ years of experience in IT auditing, information security, or risk management.
• In-depth understanding of information and cyber security risk management and control requirements.
• Strong communication skills to explain technical issues to audit and business management.
• Team management, coaching, and mentoring with collaboration across teams.

Responsibilities

• Develop audit plans for the assigned portfolio in line with GIA risk assessment.
• Lead and deliver high-risk audits with integrated teams to meet objectives.
• Provide guidance and supervision to audit teams, ensuring quality and timeliness.
• Identify risks and impacts in issues and help management to mitigate them.
• Champion use of AI and data analytics in audit assignments.
• Track implementation of action plans and escalate unresolved issues.

Skills

Identity & Access Management

Threat intelligence

Penetration testing

Team leadership

Communication skills

Risk assessment

NIST/CIS standards

Education

Bachelor’s degree in IT/CS/IS

Master’s degree (preferred)

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Standard Chartered Bank is seeking a Senior Audit Manager to join the Information and Cyber Security (ICS) team within Group Internal Audit & Investigations (GIAI). The role requires extensive expertise in identity and access management, vulnerability management, code security, security operations, threat intelligence, red/purple teaming, and NIST/CIS standards, with strong risk management experience.

The ideal candidate will lead high-risk audits, supervise audit teams, and drive the use of AI