Senior IT Advisory Manager – Risk & Cybersecurity

BDO Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

BDO Limited in Hong Kong seeks a Principal/Senior Manager for IT Advisory (Risk Advisory Services). You will lead IT risk, control, and cybersecurity engagements, evaluating IT security controls across hardware and applications and advising on data protection and governance.

You will coordinate cross-border projects, develop quality reports, and support business development while staying aligned with the firm’s values and global vision. Travel to China and other countries may be required.

Qualifications

• 10 years or above experience in information security, IT audit, data security or privacy and technology risk management.
• A degree holder in Information Systems, computer science or equivalent experience.
• Industrial experience should include manufacturing, securities and financial institutions, e-commerce, etc.
• Experience in the detection and response to cybersecurity incidents.
• Experience in design, implementation and architecture of enterprise solutions such as SAP, Oracle, Netsuite, etc.
• Experience in developing and maintaining IT policies, procedures, standards and guidelines.
• Certifications in information security (e.g., ITIL v3, ISO27001, ISC2, ISACA, CISSP, CISA, CISM, CDPSE or CEH) would be a plus.
• Knowledge of international information security standards (e.g., COBIT, ISO 27001, NIST, PCI).
• Knowledge in programming languages relevant to mobile apps or web-based software.
• Knowledgeable in security technologies including blockchain, AI, RPA, authentication, threat management, and penetration testing.

Responsibilities

• Lead IT risk and cybersecurity engagements for IT controls review.
• Act as SME in relation to IT risk, control and cybersecurity.
• Conduct risk assessments and provide data protection recommendations.
• Conduct cybersecurity engagements including penetration testing and vulnerability scanning.
• Conduct IT audit engagements and ERP/ financial system implementation reviews.
• Support detection and response to cybersecurity incidents.
• Deliver security awareness training to promote risk-aware culture.
• Coordinate engagements across groups and geographies; produce quality reports and proposals.
• Plan and execute business development activities.

Skills

Information security

IT audit

Data security

Privacy

Technology risk management

Risk assessments

Cybersecurity

Cyber incident detection and response

Security awareness training

Business development

Project leadership

IT policies, procedures, standards

Security certifications (e.g. CISSP, C

Education

Degree in Information Systems / Computer Science

Tools

SAP

Oracle

Netsuite

Job description

BDO Limited in Hong Kong seeks a Principal/Senior Manager for IT Advisory (Risk Advisory Services). You will lead IT risk, control, and cybersecurity engagements, evaluating IT security controls across hardware and applications and advising on data protection and governance.

You will coordinate cross-border projects, develop quality reports, and support business development while staying aligned with the firm’s values and global vision. Travel to China and other countries may be required.