Job Responsibilities:

1. Plan and lead IT audit projects for IT general controls and application controls, data security review, IT risk assessment, system implementation and application workflows etc.
2. Determine the job scope and objective, develop audit plan and work schedule
3. Conduct audit and perform assessment to evaluate the adequacy of internal control relating to wide range of IT operations, systems and applications
4. Ensure the documents and supporting evidence submission within the agreed timeframe, evaluate risk impact and vulnerability
5. Provide guidance to team members, review and monitor the work progress in due course
6. Prepare and discuss audit findings and recommendations with senior management for Audit Committee Meeting purposes

Job Requirements:

1. Degree holder in Computer Science or related discipline
2. Minimum 10 years of IT audit experience, with auditing firms or sizable companies is highly preferred
3. With professional qualifications (i.e. CISA, CISSP, CRISC etc.) is highly desirable
4. Knowledge of ISO 27000, CSC20, NIST and auditing software Tableau and ACL is a plus
5. Familiar with GDPR and other security regulatory requirements in HK and PRC
6. Proficiency in vulnerability assessment scanning software (i.e. Nmap, Nessus or OpenVAS)
7. Strong communication and problem solving skills with ability to interact, collaborate and influence cross division/ function members
8. Proficiency in written and spoken English & Chinese (Cantonese & Putonghua)
9. Frequent travel is required