VP - IT Audit, Bank, 62k

Michael Page; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

Michael Page is seeking a VP IT Audit in Hong Kong focusing on accounting and finance within the banking industry. The role involves leading IT and information security audits from planning through remediation, adhering to internal frameworks, and delivering value-added recommendations.

The ideal candidate will possess professional qualifications such as CISA, CIA, CPA, and have extensive IT audit experience in banking or financial institutions across APAC.

Qualifications

• Degree holder with professional qualifications such as CISA, CIA, CPA, AIGP, AAIA, or similar credentials.

Responsibilities

• Plan, lead, and deliver IT and Information Security audits from start to finish, including risk assessment and remediation follow-up.
• Perform audit reviews following the Bank's internal audit framework and methodologies.
• Evaluate IT and cybersecurity controls and provide risk-based recommendations to strengthen the control environment.
• Support regional and global audit programs related to technology, information security, and cyber risk management.
• Leverage data analytics and technology-enabled audit techniques to assess risk exposures and control effectiveness.
• Build partnerships with IT and Information Security teams, acting as a trusted risk advisor.
• Contribute to annual risk assessment by understanding business objectives and regional technology functions.

Skills

IT audit

Cybersecurity

Risk management

Stakeholder management

Education

CISA

CIA

CPA

Job description

• IT Audit from banking industry is a must
• Travel once or twice a year

About Our Client

The VP IT Audit role in Hong Kong focuses on accounting and finance within the banking industry. This permanent position offers a competitive salary and benefits package for professionals skilled in this field.

Job Description

Job Responsibilities

• Plan, lead, and deliver IT and Information Security (IS) audits from start to finish, including risk assessment, audit planning, fieldwork execution, report preparation, and follow-up on remediation actions.
• Perform audit reviews in line with the Bank's established internal audit framework, standards, and methodologies.
• Evaluate the effectiveness of IT and cybersecurity controls and identify opportunities to strengthen the control environment through practical and value-added recommendations.
• Support regional and global audit programs relating to technology, information security, and cyber risk management.
• Leverage data analytics and technology-enabled audit techniques to evaluate risk exposures and internal control effectiveness.
• Build and maintain strong partnerships with key stakeholders across IT and Information Security functions, serving as a trusted advisor on risk and control matters.
• Contribute to the annual risk assessment process by developing a comprehensive understanding of business objectives, strategic initiatives, operational processes, emerging risks, and control challenges within assigned technology functions across the region.
• Conduct ongoing monitoring of IT and cybersecurity activities, industry developments, regulatory changes, and business initiatives to ensure audit coverage remains relevant and risk-focused.
• Participate in Internal Audit Department strategic projects, transformation initiatives, and other cross-functional assignments as required.
• Travel within the region may be required on an occasional basis.

The Successful Applicant

Ideal Candidate Profile

• Degree holder with relevant professional qualifications such as CISA, CIA, CPA, AIGP, AAIA, or similar credentials.
• Proven track record in IT audit, cybersecurity audit, or technology risk management, with significant exposure to banking or financial institutions.
• Broad knowledge across technology domains, including cyber risk, cloud computing, digital transformation, AI, IT governance, infrastructure, and application controls.
• Familiar with APAC regulatory requirements and industry best practices relating to information security, operational resilience, and technology risk.
• Good understanding of banking systems, products, and associated technology control frameworks.
• Strong problem-solving mindset with the ability to influence stakeholders and deliver practical, risk-based recommendations.
• Comfortable operating in a dynamic, international environment and collaborating with teams across multiple jurisdictions.
• Strong command of spoken and written English.

What's on Offer

• Annual payment based on 12 months plus additional discretionary bonus.
• Permanent position in the financial services industry in Hong Kong.