Vice President, IT Audit

Charterhouse Partnership; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Charterhouse Partnership is seeking an experienced Vice President, IT Audit to join its regional Internal Audit team in Hong Kong. The role focuses on leading audits across cybersecurity, cloud, SDLC and IT governance within a banking context.

The ideal candidate holds relevant certifications and 8+ years’ experience, with strong stakeholder management skills and fluency in English. Regional travel may be required.

Qualifications

• Degree-qualified with professional certifications such as CISA, CIA, CPA, AIGP, AAIA.
• Minimum 8 years of experience in IT Audit, Technology Risk or Information Security Audit.
• Knowledge of ITGC, cybersecurity frameworks, cloud, SDLC and AI governance.

Responsibilities

• Lead end-to-end IT and information security audits across Asia Pacific.
• Assess effectiveness of technology and risk controls and provide practical recommendations.
• Evaluate risks across cybersecurity, cloud, digital banking, SDLC and IT service management.
• Support regional/global audit initiatives and thematic reviews.
• Utilize data analytics to identify emerging risk trends.
• Build relationships with technology, security and business stakeholders.
• Participate in enterprise risk assessments and regulatory monitoring.
• Travel regionally as required.

Skills

IT Audit

Information Security

Risk Management

Stakeholder communication

Project management

Education

CISA

CIA

CPA

AIGP

AAIA

Job description

Our client is a leading international banking group with a strong presence across Asia Pacific, seeking an experienced Vice President, IT Audit to join its regional Internal Audit team.

This is a high-profile opportunity for a seasoned technology audit professional to lead complex audits across cybersecurity, technology infrastructure, cloud environments, digital banking, and emerging technologies. The successful candidate will partner closely with senior technology and business stakeholders across the region while contributing to the organization's technology risk oversight and governance framework.

Key Responsibilities

• Lead and execute end-to-end IT and Information Security audits across Asia Pacific, including planning, fieldwork, reporting, and issue validation.
• Assess the effectiveness of technology, cybersecurity, and operational risk controls and provide practical recommendations to strengthen the control environment.
• Evaluate risks and controls across areas such as:
  • Cybersecurity and information security
  • Cloud computing and infrastructure platforms
  • Digital banking and payment systems
  • Application controls
  • IT service management
  • System development lifecycle (SDLC)
  • Artificial Intelligence and emerging technologies
  • Technology governance and strategy
• Support regional and global audit initiatives and thematic reviews.
• Leverage data analytics to enhance audit effectiveness and identify emerging risk trends.
• Develop and maintain strong relationships with technology, security, and business stakeholders across multiple jurisdictions.
• Contribute to enterprise-wide risk assessments and continuous monitoring activities.
• Stay abreast of evolving regulatory, technology, and cybersecurity developments to ensure appropriate audit coverage.
• Participate in strategic projects and transformation initiatives within the Internal Audit function.
• Occasional regional travel may be required.

Ideal Candidate Profile

• Degree-qualified with relevant professional certifications such as CISA, CIA, CPA, AIGP, AAIA, or equivalent.
• Minimum 8 years of experience in IT Audit, Technology Risk, Information Security Audit, or related disciplines, preferably within the banking or financial services sector.
• Strong knowledge of:
  • IT General Controls (ITGC)
  • Cybersecurity frameworks and controls
  • Cloud technologies and associated risks
  • Infrastructure and operational technology controls
  • Digital banking and payment systems
  • SDLC and application controls
  • AI governance and emerging technology risks
• Familiarity with technology risk and cybersecurity regulatory requirements across Asia Pacific, including major banking regulators.
• Sound understanding of risk management and control frameworks supporting banking products and services.
• Proven ability to manage audits independently and engage effectively with senior stakeholders.
• Strong analytical, project management, and communication skills.
• Experience working in a regional or global environment will be highly regarded.
• Excellent written and spoken English.