Vice President, IT Audit

Charterhouse Partnership Asia; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Charterhouse Partnership Asia is seeking a Vice President, IT Audit to lead end-to-end audits across Asia Pacific. The role partners with senior technology and business stakeholders to strengthen risk governance, leverage analytics, and improve controls in cybersecurity, cloud, and SDLC.

The ideal candidate will have 8+ years of IT audit/technology risk experience, professional certifications, and excellent English communication. Regional travel may be required within a banking environment.

Qualifications

• Degree-qualified with professional certifications such as CISA, CIA, CPA, AIGP or AAIA.
• Minimum 8+ years of IT Audit/Technology Risk experience, preferably in banking/FS.
• Strong knowledge of ITGC, cybersecurity frameworks, cloud tech risks and SDLC controls.
• Experience working with regional/global stakeholders and regulators in APAC.
• Excellent written and spoken English and stakeholder engagement skills.

Responsibilities

• Lead end-to-end IT and Information Security audits across Asia Pacific, including planning, fieldwork, reporting, and issue validation.
• Assess effectiveness of controls in cybersecurity, information security, cloud, SDLC and technology infrastructure.
• Evaluate risks across cybersecurity, cloud, digital banking, payment systems and IT governance.
• Leverage data analytics to identify trends and enhance audit effectiveness.
• Support regional/global audit initiatives and thematic reviews.
• Travel regionally as required.

Skills

ITGC

Cybersecurity controls

Cloud risks

SDLC controls

AI governance

Regulatory awareness

Auditing

Education

CISA

CIA

CPA

AIGP

AAIA

Job description

Job description

Our client is a leading international banking group with a strong presence across Asia Pacific, seeking an experienced Vice President, IT Audit to join its regional Internal Audit team.

This is a high-profile opportunity for a seasoned technology audit professional to lead complex audits across cybersecurity, technology infrastructure, cloud environments, digital banking, and emerging technologies. The successful candidate will partner closely with senior technology and business stakeholders across the region while contributing to the organization's technology risk oversight and governance framework.

Key Responsibilities

• Lead and execute end-to-end IT and Information Security audits across Asia Pacific, including planning, fieldwork, reporting, and issue validation.
• Assess the effectiveness of technology, cybersecurity, and operational risk controls and provide practical recommendations to strengthen the control environment.
• Evaluate risks and controls across areas such as:
  • Cybersecurity and information security
  • Cloud computing and infrastructure platforms
  • Digital banking and payment systems
  • Application controls
  • IT service management
  • System development lifecycle (SDLC)
  • Artificial Intelligence and emerging technologies
  • Technology governance and strategy
• Support regional and global audit initiatives and thematic reviews.
• Leverage data analytics to enhance audit effectiveness and identify emerging risk trends.
• Develop and maintain strong relationships with technology, security, and business stakeholders across multiple jurisdictions.
• Contribute to enterprise-wide risk assessments and continuous monitoring activities.
• Stay abreast of evolving regulatory, technology, and cybersecurity developments to ensure appropriate audit coverage.
• Participate in strategic projects and transformation initiatives within the Internal Audit function.
• Occasional regional travel may be required.

Ideal Candidate Profile

• Degree-qualified with relevant professional certifications such as CISA, CIA, CPA, AIGP, AAIA, or equivalent.
• Minimum 8 years of experience in IT Audit, Technology Risk, Information Security Audit, or related disciplines, preferably within the banking or financial services sector.
• Strong knowledge of:
  • IT General Controls (ITGC)
  • Cybersecurity frameworks and controls
  • Cloud technologies and associated risks
  • Infrastructure and operational technology controls
  • Digital banking and payment systems
  • SDLC and application controls
  • AI governance and emerging technology risks
• Familiarity with technology risk and cybersecurity regulatory requirements across Asia Pacific, including major banking regulators.
• Sound understanding of risk management and control frameworks supporting banking products and services.
• Proven ability to manage audits independently and engage effectively with senior stakeholders.
• Strong analytical, project management, and communication skills.
• Experience working in a regional or global environment will be highly regarded.
• Excellent written and spoken English.