Senior Manager/Manager–IT Audit, Financial Services (Technology Risk Assurance)

BDO; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

BDO在科技风险审保（TRA）团队寻求资深经理/经理，负责面向银行、虚拟银行、保险等金融机构的IT审计工作。你将与参与方共同规划审计策略，确认IT控制及系统数据的可靠性，并对IT结论负责。

岗位涵盖ITGC/ITAC测试、关键余额的复核，以及将监管要求转化为审计方法。需带领团队、参与投标及客户关系管理，并在大中华区多项目间协调出差。

Qualifications

• 至少9年IT审计/技术风险保证经验，银行/保险客户经验优先
• 至少4年服务银行/保险领域经验，2年以上项目管理经历
• 信息技术相关学士及以上学历
• CPA / CISA 等专业资格，CRISC、CISSP、CIA 也受重视
• 熟悉ITGC/ITAC在受监管金融机构中的测试
• 熟悉HKMA、保险监管科技风险要求及相关法规
• 英语优秀，粤语/普通话能力者更佳
• 能在多项项目下按时完成并具备在大中华区出差能力

Responsibilities

• 管理银行与保险相关的IT审计工作流，与参与方制定方法
• 直接进行ITGC/ITAC测试，评估核心系统数据流和接口控制
• 评估HKFRS 9下的预计信用损失与HKFRS 17下的保险合同计量
• 评估控制缺陷及其对财务报表及监管合规的影响，并向审计委员会汇报
• 将监管变更转化为审计方法，覆盖HKMA等要求
• 领导与辅导团队成员，审核工作底稿至HKSA标准
• 参与业务拓展：投标、提案及费用估算，与客户领导层建立关系
• Senior Manager层面负责组合预算、人员配置与日常联系人职责
• 推动公司价值观与质量标准，完善方法论与知识库
• 支持全球愿景并践行企业价值观

Skills

IT Audit

Technology Risk

Engagement Management

Financial Services

Regulatory Awareness

Communication

English Proficiency

Cantonese/Putonghua

Education

Bachelor's degree

CPA / CISA

CRISC / CISSP / CIA valued

Tools

HKMA guidance

C-RAF

Job description

Job Summary

As a Senior Manager / Manager in BDO's Technology Risk Assurance (TRA) team, you will manage the IT audit work on our financial services engagements: licensed banks, virtual banks, insurers, and other institutions supervised by the HKMA and the Insurance Authority.

What you'll be doing

• Manage the IT audit workstream on external audits of banks and insurers: plan the approach with the engagement partner, agree reliability on IT controls and system-generated data, and own the IT conclusions the audit team relies on.

• Direct walkthroughs and testing of ITGC and ITAC, including automated interface and data-flow controls between core banking, treasury, payments, policy administration, claims, actuarial and general ledger systems.

• Evaluate the system and data controls behind the highest-judgement balances, such as expected credit loss under HKFRS 9 and insurance contract measurement under HKFRS 17, where a data failure becomes a material misstatement.

• Assess control deficiencies, determine their impact on financial statement assertions and regulatory compliance, and present conclusions to audit committees.

• Turn regulatory change into audit approach: translate developments under the HKMA Supervisory Policy Manual, C-RAF, operational resilience requirements and the Insurance Authority's revised GL20 into risk assessment and testing for the engagement team.

• Lead, coach and review: develop Senior Associates and Associates, review workpapers to HKSA documentation standards, and conduct performance appraisals.

• Support business development: scope financial services tenders, contribute to proposals and fee estimates, and build lasting relationships with client technology and finance leadership.

• For Senior Manager: take portfolio-level ownership of financial services engagements, including budgets, staffing and recoveries; act as the senior day-to-day contact for client leadership; develop the Managers in the team; and lead tenders alongside the partner.

• Champion the firm's core values, independence and quality standards, and shape the financial services methodology and knowledge base the team works from.

• Support and act towards the BDO Global Vision.

• Be committed to act with the firm's core values and competency expectations.

What you'll bring

• Senior Manager: 9+ years in IT audit, technology risk assurance or technology risk advisory, including at least 4 years serving banks and/or insurers and 2+ years managing engagements.

• Manager: 6+ years in IT audit, technology risk assurance or technology risk advisory, including at least 3 years in financial services. For both levels, advisory or internal audit experience counts where it involved hands-on testing of IT controls.

• Bachelor's degree or above in Information Technology, Computer Science, Information Systems, Accounting, Finance or a related discipline.

• A recognized professional qualification: CPA / CISA required; CRISC, CISSP or CIA also valued.

• Expert command of ITGC/ITAC testing in regulated financial institutions, and of how IT controls support financial statement assertions under HKSA 315.

• Working knowledge of core banking and/or insurance systems, and of how a loan, deposit, trade or policy moves from front office to general ledger.

• Familiarity with HKMA and Insurance Authority technology risk expectations (Supervisory Policy Manual technology modules, C-RAF, operational resilience, revised GL20 / CRAF) and with the Banking Ordinance and Insurance Ordinance.

• Excellent written and spoken English; given our Hong Kong and Mainland client base, Cantonese and/or Putonghua is highly valued.

• Able to manage several engagements under audit and regulatory deadlines, with occasional travel within Greater China.

We are an equal opportunity employer, and offer excellent prospects and career development for the right candidate.

行業 Industry

• 會計 / 審計 / 稅務 Accounting / Audit / Taxation

工作種類 Job Category

• 銀行 / 金融 / 證券 (法規 / 監管) Banking / Finance / Securities (Compliance / Regulatory)

工作地點 Location

• 上環 Sheung Wan

學歷要求 Education

• 學士 Bachelor