Senior Manager - Manager, IT & Systems Audit (HK Listed Co.)

Responsibilities:

• Assist in developing and executing the annual risk-based IT and systems audit plan
• Lead and manage end-to-end IT audit engagements from planning, scoping to reporting
• Evaluate the design and operational effectiveness of IT general controls (ITGC), application controls, and security controls.
• Identify technology-related risks, assess their potential impact, and recommend practical solutions to mitigate them.
• Review system configurations, access management, change management, and disaster recovery procedures.
• Ensure the company's IT systems and practices comply with relevant HKEX listing rules for corporate governance and internal controls, as well as applicable data privacy and cybersecurity regulations in HK and China.
• Supervise, coach, and mentor audit team members to enhance their proficiency and ensure high-quality audit delivery.
• Undertake special reviews and projects as assigned by senior management or the Audit Committee.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or a related discipline.
• Relevant professional certifications are strongly preferred (e.g., CISA, CISSP, or equivalent).
• 10-20 years of experience in IT audit, internal audit, or technology risk.
• Candidates with a proven track record of leading complex audits and managing teams will be considered for the Senior Manager role.
• Prior experience within a listed company and a Big 4 firm is highly advantageous.
• Hands-on experience in Mainland China operations and understanding of the local regulatory environment is preferred.
• Solid understanding of IT governance and risk management frameworks (e.g., COBIT, NIST, ISO 27001).
• Strong technical knowledge of IT infrastructure, application systems (especially ERP systems), databases, information security, and project management.
• Excellent analytical, problem-solving, and report-writing skills.
• Excellent command of written and spoken English and Chinese (Cantonese and Mandarin) is required to interact with stakeholders across the regions.