Senior IT Audit & Cybersecurity Leader

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

HKEX is seeking an Assistant Vice President of IT Audit to lead and deliver IT audits with a strong cybersecurity focus. The role reports to the Head of IT Audit and manages a team, driving risk-based testing and assurance across the Group’s IT environment.

The candidate will develop testing strategies, stay current on industry trends, and provide risk and control advice to stakeholders and senior management, ensuring effective remediation and regulatory readiness.

Qualifications

• 8+ years in internal or external audit, risk management or cybersecurity.
• University graduate in Accounting, Finance, Business Administration or Technology.
• Possess at least one professional qualification such as CPA, CIA, CISA, CISM, CISSP, CEH, CCSP/CAAK, CSX-P or other security related qualifications.
• Strong understanding of NIST Cybersecurity Framework, ISO 27001, CIS, etc.
• Knowledge of IT security software, operating systems, databases, cloud, networking and emerging technology risks.

Responsibilities

• Independently manage and lead IT audits with emphasis on cybersecurity, from scoping to reporting.
• Assess key risks and controls, supervise team members, and communicate issues to stakeholders.
• Develop risk-based testing strategies for design and operating effectiveness of controls.
• Articulate potential control gaps, threats and exposures to management.
• Leverage automation audit techniques to improve efficiency and effectiveness.
• Conduct continuous risk monitoring of cybersecurity and IT operations.
• Manage stakeholder relationships and provide risk and control advice.
• Support senior management, Audit Committee and regulators with materials.
• Participate in ad-hoc audits and investigations as needed.
• Provide coaching to junior team members and validate remediation.

Skills

Cybersecurity expertise

Auditing

Risk management

Stakeholder management

Communication skills

Education

University degree in Accounting, Finance, Business Administration, or Technology

Job description

HKEX is seeking an Assistant Vice President of IT Audit to lead and deliver IT audits with a strong cybersecurity focus. The role reports to the Head of IT Audit and manages a team, driving risk-based testing and assurance across the Group’s IT environment.

The candidate will develop testing strategies, stay current on industry trends, and provide risk and control advice to stakeholders and senior management, ensuring effective remediation and regulatory readiness.