We are looking for high-calibre individuals to join the Group Internal Audit Department for serving the HKMC Group.

Job Descriptions:

• Conduct regular risk assessments and assist in developing a risk-based IT audit plan;
• Lead and conduct thematic IT audits of the Group’s IT environment and system operations;
• Collaborate with business auditors in operational audits by reviewing application controls and deploying data analytics;
• Identify opportunities to strengthen IT governance, risk management, internal controls, and regulatory compliance;
• Conduct non-assurance projects such as system pre-implementation reviews, regulatory compliance readiness assessments, or incident investigations; and
• Prepare audit and consultancy reports with practical recommendations for management and the Audit Committee.

Requirements:

• Degree holder in IT, Computer Science, Management Information Systems, or related disciplines, ideally holding qualifications such as CISSP, CISA, CISM, CCSP, or GSNA;
• A minimum of 8 years of hands-on IT audit or cybersecurity experience, preferably with the financial services sector;
• Familiarity with IT-related regulatory requirements for financial institutions;
• Knowledge of data analytics and visualisation tools (e.g., SQL, Power BI, Tableau) and generative AI would be an advantage;
• Independent, self-motivated, well-organised, with strong analytical and interpersonal skills; and
• Excellent communication skills with a strong command of written and spoken English and Chinese.

Interested parties please send your full resume stating current and expected salary by 1 April 2025.