Senior IT & Cybersecurity Audit Leader (Regional)

Tenth Revolution Group; Hong Kong Island; On-site; HKD 480,000 - 560,000; Full time

Job summary

Tenth Revolution Group in Hong Kong seeks an experienced Senior Auditor - IT & Cybersecurity to join a well-established regional organization with broad exposure across IT audit, cybersecurity, cloud, technology risk and governance. You will plan and execute audits, review controls and provide practical recommendations to strengthen technology risk management.

The role offers opportunities to work on regional audit projects, engage with diverse technology and business stakeholders, and travel up

Qualifications

• 3–5 years of IT Audit or related field.
• Strong ITGC testing and technology control assessment.
• Knowledge of COBIT, ISO 27001/27002, NIST CSF, CIS Controls and/or ITIL.
• Experience with IAM/PAM, network security, vulnerability management, monitoring and incident response.
• Cloud technologies and cloud security knowledge is advantageous.
• CISA, CISSP and/or CISM preferred.
• Strong analytical, communication and stakeholder management skills.
• Willing to travel up to 30% regionally/internationally.

Responsibilities

• Plan and execute IT & Cybersecurity audit engagements across regional operations.
• Perform audits covering ITGC, cybersecurity, network security, IAM/PAM, cloud security, data centre, technology governance and IT risk management.
• Conduct walkthroughs, control testing and data analysis to identify technology risks and control weaknesses.
• Review IT resilience and operational controls, including backup/recovery, DR/BCP, patching, configuration and infrastructure monitoring.
• Assess technology project and application controls covering SDLC, DevSecOps, CI/CD, change/release management and environment segregation.
• Review cloud environments including Azure, AWS, Microsoft 365, IaaS/PaaS/SaaS and hybrid infrastructure.
• Prepare clear audit findings and provide practical, value-added recommendations to management.
• Monitor remediation progress and conduct follow-up reviews on outstanding audit issues.
• Support multiple audit engagements concurrently and provide guidance to junior team members.
• Participate in regional/international audit assignments where required.

Skills

IT Audit

Technology Risk

Cybersecurity

Cloud Security

ITGC testing

COBIT

ISO 27001

NIST CSF

CISA

CISSP

CISM

IAM/PAM

Education

Degree in Information Systems

Job description

Tenth Revolution Group in Hong Kong seeks an experienced Senior Auditor - IT & Cybersecurity to join a well-established regional organization with broad exposure across IT audit, cybersecurity, cloud, technology risk and governance. You will plan and execute audits, review controls and provide practical recommendations to strengthen technology risk management.

The role offers opportunities to work on regional audit projects, engage with diverse technology and business stakeholders, and travel up