Description

• Lead the IT Audit team and support the Risk Management team in strengthening overall governance and control frameworks.
• Manage the IT internal audit function, ensuring effective risk management, regulatory compliance, and robust IT and cybersecurity controls.
• Develop and execute the annual IT audit plan, covering IT general controls, application systems, and emerging technology environments.
• Act as an independent audit advisor on major IT projects, providing expert input on system development, implementation, and control design.
• Present clear, concise, and actionable audit reports to management and the Board Audit & Risk Committee, highlighting findings and recommending improvements.
• Continuously enhance IT audit methodologies and support PRC audit reviews when required.

• Bachelor's degree in Information Technology, Finance, Accounting, Engineering, or a related discipline.
• Professional qualifications such as CISA or CISSP required; CIA or CPA is an advantage.
• Minimum 20 years of IT audit or related experience, including at least 10 years in managerial positions within sizable organizations.
• Strong knowledge of IT general controls, cybersecurity, system development processes, and leading risk frameworks (e.g., NIST, SOC 2, ISO27001).
• Practical experience with IT infrastructure, ERP systems (e.g., SAP), cloud computing, e-commerce, AI, and IoT applications.
• Excellent analytical, communication, and leadership skills, with proficiency in English, Cantonese, and Putonghua.
• Familiarity with PRC business environments is preferred.