Senior IT Risk & Audit Manager

mazars-talent; Hong Kong; On-site; HKD 600,000 - 1,200,000; Full time

Benefits offered by this job

Medical and dental insurance

Life insurance

5-day working week

Discretionary performance bonus

Birthday leave

Marriage leave

Employee activities

Job summary

Forvis Mazars is a leader in audit, tax and advisory services with a global footprint. The Risk Advisory Services team conducts IT risk assessments, control reviews and IT audit engagements to strengthen client resilience.

The role involves leading IT audit work, partnering with clients, and delivering value through risk-based recommendations across frameworks and IT controls. A senior professional with 5+ years’ IT audit or cybersecurity experience is preferred, with travel as required.

Qualifications

• Bachelor’s degree in computer science, information management, accounting or related disciplines.
• CISA or CPA professional qualifications are required.
• Fluent written and spoken English; Mandarin/Chinese an advantage.
• Strong teamwork and ability to work independently with good problem-solving skills.

Responsibilities

• Analyse and evaluate IT risks and controls; provide IT risk reduction recommendations.
• Conduct benchmarking against IT risk-related industry frameworks (NIST, ISO, COBIT, etc.).
• Scope and manage IT audits, including financial management and delivery risk review.
• Lead fieldwork and small project teams delivering assurance services to clients.
• Communicate audit findings to senior management and clients; support external audits.

Skills

Communication skills

Teamwork

Interpersonal skills

Problem-solving

Willingness to travel

Education

Bachelor's degree

CISA

CPA

Job description

Forvis Mazars is a leader in audit, tax and advisory services with a global footprint. The Risk Advisory Services team conducts IT risk assessments, control reviews and IT audit engagements to strengthen client resilience.

The role involves leading IT audit work, partnering with clients, and delivering value through risk-based recommendations across frameworks and IT controls. A senior professional with 5+ years’ IT audit or cybersecurity experience is preferred, with travel as required.