Join a bank in Hong Kong as Vice President – Technology Audit, Asia Pacific, supporting regional technology and information-security audit coverage. You will lead audit assignments, assess technology controls and provide practical recommendations to strengthen risk management across the Bank’s Asia Pacific operations.
About the Role
This opportunity is suited to an experienced IT audit professional with strong technical knowledge, sound risk judgement and the ability to work independently. Working with regional and global stakeholders, you will evaluate controls across cybersecurity, applications, infrastructure and emerging technologies, while contributing to risk assessments, continuous monitoring and strategic audit initiatives.
Key Responsibilities
- Independently lead and execute technology audit assignments, covering planning, fieldwork, reporting and issue follow-up through closure, in accordance with the Bank’s internal audit methodology.
- Assess IT and information-security control environments, identify weaknesses and emerging risks, and provide actionable recommendations to management.
- Support regional and global IT and cybersecurity audit initiatives, applying data analytics to strengthen control assessments and audit insights.
- Contribute to annual risk assessments by developing a thorough understanding of the strategies, plans, products, processes, performance and risk exposures of assigned IT and information-security departments across Asia Pacific.
- Perform continuous monitoring of regional technology and information-security activities, tracking regulatory, business and operational developments to inform ongoing audit coverage.
- Build effective relationships with technology and information-security management, participate in regional strategic initiatives and global projects, and undertake occasional travel as required.
Requirements
- University degree with a relevant professional qualification, such as CISA, CPA, CIA, AIGP or AAIA.
- At least 8 years of IT or information-security audit experience, preferably within the banking industry.
- Strong audit knowledge across cybersecurity, application controls, IT infrastructure, IT service management, digital banking, artificial intelligence, cloud technologies, technology strategic planning and the system development life cycle.
- Familiarity with technology risk management and cybersecurity regulatory requirements across Asia Pacific, including those of the Hong Kong Monetary Authority and Monetary Authority of Singapore.
- Good understanding of controls and risk management for banking products and services, including payments, electronic banking, treasury, corporate banking and structured finance.
- Ability to work independently, with strong communication, stakeholder-management, planning and organisational skills; global stakeholder engagement experience is an advantage.
- Proficiency in written and spoken English, with willingness to undertake occasional business travel.