Senior IT Risk & Audit Analyst — Grow & Impact

Baker Tilly Hong Kong Business Services Limited; Hong Kong; On-site; HKD 420,000 - 620,000; Full time

Benefits offered by this job

Attractive remuneration package

Job summary

Baker Tilly Hong Kong is seeking an Analyst/Senior Analyst in Information Technology Risk Advisory to perform IT risk assessments and IT audits for diverse clients, including IPO candidates and listed companies. You will engage with clients, document risks and controls, and stay updated on IT security trends.

The role requires a degree in IT/IS/CS or accounting, 2+ years in IT internal audit or cybersecurity, and strong English/Chinese communication.

Qualifications

• Bachelor/Master in Information Systems, IT, Information/Cyber Security, Computer Science or Accounting.
• Minimum 2 years in IT internal audit, IT risk or cybersecurity.
• Professional certifications such as CISA, CISM, CRISC, CISSP, CCSP, or ISO27001 lead auditor preferred but not required.
• Strong knowledge of IT security concepts and frameworks (COBIT, ISO27001, NIST).
• Proficiency in English and Chinese is required; Cantonese and Mandarin are preferred.
• Immediate availability is highly preferred.

Responsibilities

• Conduct IT risk assessments and IT audits across general and application controls.
• Interview clients to assess IT and business processes, risks, and controls.
• Identify control deficiencies and provide actionable recommendations.
• Prepare and review workpapers, reports, and communicate progress to stakeholders.
• Stay updated with laws and standards related to IT auditing and security.

Skills

IT risk assessment

Education

Bachelor's/Master's in Information Systems/IT/InfoSec/CS/Accounting

Tools

CISA

CISM

CRISC

CISSP

CCSP

ISO27001 lead auditor

Job description

Baker Tilly Hong Kong is seeking an Analyst/Senior Analyst in Information Technology Risk Advisory to perform IT risk assessments and IT audits for diverse clients, including IPO candidates and listed companies. You will engage with clients, document risks and controls, and stay updated on IT security trends.

The role requires a degree in IT/IS/CS or accounting, 2+ years in IT internal audit or cybersecurity, and strong English/Chinese communication.