Responsibilities

• Lead IT audit engagements, including planning, scoping, execution and project management.

• Review General IT Controls (GITC), application controls, interface controls and automated business controls.

• Perform IT risk assessments covering ERP systems, cloud environments, databases, operating systems and cybersecurity controls.

• Evaluate IT governance frameworks (e.g. ISO 27001, COBIT, NIST) and provide practical recommendations.

• Utilize Computer Assisted Audit Techniques (CAATs) and data analytics to improve audit effectiveness.

• Coach and guide junior team members while reviewing their work, offer advices and directions.

• Liaise with clients to understand IT environments, discuss findings and present recommendations.

• Prepare audit reports and communicate audit findings to management.

• Build and maintain strong working relationships with clients and internal engagement teams.

Requirements

• Bachelor's Degree in Accounting, Information Systems, Computer Science, Business, Finance or related disciplines.

• At least 3 years' experience in IT Audit, IT Risk Consulting or Information Security.

• Experience leading IT audit engagements is essential.

• Knowledge of ERP systems (e.g. SAP, Oracle, Kingdee, Dynamics, Oracle NetSuite, etc.) is an advantage.

• Familiar with IT governance and cybersecurity frameworks such as ISO 27001, COBIT and NIST.

• Experience with CAATs or data analytics tools is preferred.

• Preference on possession of professional qualification such as CISA, CPA, CIA, CISM or CISSP

• Proficient in both written and spoken English and Chinese, including Putonghua.

• Strong analytical, communication and interpersonal skills.

• Able to work independently, oversee multiple engagements and travel when required.

Personal data collected will be used for recruitment purpose only.