Manager to VP, Internal Audit (IT Audit)

Role Details Reference Number IA/IT/P Job Title Manager to VP, Internal Audit (IT Audit) Unit/Department Internal Audit Location Hong Kong Job Posted 2026/01/13 Job Status Full Time Main Responsibilities

• Perform risk assessment and development of audit plan for individual IT audit project covering IT general controls, application controls, IT infrastructure and security review.
• Conduct audit on the Bank's internal control environment to identify control weaknesses in IT related controls.
• When assigned as Auditor-in-Charge, prepare audit report and lead an audit team to undertake assigned audit project to meet audit objectives in a timely and satisfactory manner.
• Provide value-added findings and appropriate recommendation in written audit report by balancing risks, controls, business and efficiency issues. Prepare audit programs, working papers and audit finding.
• Follow up on the progress and implementation of rectifications as required to ensure prompt and satisfactory completion.
• Undertake thematic or ad hoc assignments.

Requirements

• University degree in information systems, accounting, finance or related disciplines.
• With recognized professional qualifications under the HKMA Enhanced Competency Framework on Cybersecurity such as CISA, CISSP, CISM, CRISC, CSX-F, CSX-P, CISP-HK and CEH is preferable.
• Minimum 5 years of internal and/or external IT audit experiences in banking industry.
• Knowledge on Fin. Tech, including RPA, Artificial Intelligent, Blockchain, Data Analytics, would be an advantage.
• Proficient in written and spoken English and Chinese.
• Good analytical, communication and report writing skills.
• An independent, committed and self-motivated team player with multi-tasking and good interpersonal skills.
• Candidates with more experience will be considered for a senior role. To apply, please submit your application along with your resume to "recruithk@asia.ccb.com". Applicants who are not contacted within 8 weeks may consider their applications unsuccessful and their personal data will be retained by the bank for a period up to two years. All information provided by applicants will be used for recruitment purposes only and will be used strictly in accordance with the bank’s personal data policies, a copy of which will be provided upon request. CLOSE