Senior Manager/Manager–IT Audit, Financial Services (Technology Risk Assurance)

BDO Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

BDO Limited in Hong Kong seeks a Senior Manager/Manager—IT Audit in Financial Services to lead IT audit work on banks, virtual banks, insurers and other HKMA/IA-regulated institutions. You will plan, supervise testing of ITGC/ITAC, assess data controls and regulatory implications, coach junior staff, and support business development across client tech and finance leadership.

Requires 9+ years in IT audit (4+ FS), CPA/CISA, deep HK regulatory knowledge, and ability to manage multiple engagements

Qualifications

• 9+ years IT audit, technology risk assurance or advisory, with 4+ years serving banks/insurers and 2+ years in leadership.
• Bachelor’s degree in IT/CS/IS/Accounting/Finance; professional qualifications CPA/CISA required.
• Deep knowledge of ITGC/ITAC testing in regulated FS and HK regulatory expectations.

Responsibilities

• Plan IT audit approach with engagement partner and own IT conclusions for FS engagements.
• Direct walkthroughs and testing of ITGC/ITAC, including data-flow controls across core systems.
• Assess control deficiencies and their impact on financial statements and regulatory compliance.
• Coach Senior Associates/Associates and review workpapers to HKSA standards.
• Support business development: scope tenders, proposals and client relationship building.

Skills

IT audit

Technology risk

Regulatory knowledge

Team leadership

Financial services knowledge

Education

Bachelor's degree in IT/CS/IS/Accounting/Finance

CPA / CISA

CRISC / CISSP / CIA valued

Tools

HKSA 315

Job description

Senior Manager/Manager–IT Audit, Financial Services (Technology Risk Assurance)

As a Senior Manager / Manager in BDO's Technology Risk Assurance (TRA) team, you will manage the IT audit work on our financial services engagements: licensed banks, virtual banks, insurers, and other institutions supervised by the HKMA and the Insurance Authority.

What you'll be doing

Manage the IT audit workstream on external audits of banks and insurers: plan the approach with the engagement partner, agree reliance on IT controls and system-generated data, and own the IT conclusions the audit team relies on.

Direct walkthroughs and testing of ITGC and ITAC, including automated interface and data-flow controls between core banking, treasury, payments, policy administration, claims, actuarial and general ledger systems.

Evaluate the system and data controls behind the highest-judgement balances, such as expected credit loss under HKFRS 9 and insurance contract measurement under HKFRS 17, where a data failure becomes a material misstatement.

Assess control deficiencies, determine their impact on financial statement assertions and regulatory compliance, and present conclusions to audit committees.

Turn regulatory change into audit approach: translate developments under the HKMA Supervisory Policy Manual, C-RAF, operational resilience requirements and the Insurance Authority's revised GL20 into risk assessment and testing for the engagement team.

Lead, coach and review: develop Senior Associates and Associates, review workpapers to HKSA documentation standards, and conduct performance appraisals.

Support business development: scope financial services tenders, contribute to proposals and fee estimates, and build lasting relationships with client technology and finance leadership.

For Senior Manager: take portfolio-level ownership of financial services engagements, including budgets, staffing and recoveries; act as the senior day-to-day contact for client leadership; develop the Managers in the team; and lead tenders alongside the partner.

Champion the firm's core values, independence and quality standards, and shape the financial services methodology and knowledge base the team works from.

Support and act towards the BDO Global Vision.

Be committed to act with the firm’s core values and competency expectations.

What you'll bring

Senior Manager: 9+ years in IT audit, technology risk assurance or technology risk advisory, including at least 4 years serving banks and/or insurers and 2+ years managing engagements.

Manager: 6+ years in IT audit, technology risk assurance or technology risk advisory, including at least 3 years in financial services. For both levels, advisory or internal audit experience counts where it involved hands-on testing of IT controls.

Bachelor's degree or above in Information Technology, Computer Science, Information Systems, Accounting, Finance or a related discipline.

A recognized professional qualification: CPA / CISA required; CRISC, CISSP or CIA also valued.

Expert command of ITGC/ITAC testing in regulated financial institutions, and of how IT controls support financial statement assertions under HKSA 315.

Working knowledge of core banking and/or insurance systems, and of how a loan, deposit, trade or policy moves from front office to general ledger.

Familiarity with HKMA and Insurance Authority technology risk expectations (Supervisory Policy Manual technology modules, C-RAF, operational resilience, revised GL20 / CRAF) and with the Banking Ordinance and Insurance Ordinance.

Excellent written and spoken English; given our Hong Kong and Mainland client base, Cantonese and/or Putonghua is highly valued.

Able to manage several engagements under audit and regulatory deadlines, with occasional travel within Greater China.

If you meet most of the above but not every line, we would still like to hear from you.

We’re BDO, a global network connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals and grow.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career – with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

We’re BDO, a global network connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals and grow.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career – with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.