China Construction Bank

Manager to VP, Internal Audit (IT Audit)

China Construction Bank

Hong Kong, Hong Kong SARPosted Jan 13, 2026

Job description

Main Responsibilities

  • Perform risk assessment and development of audit plan for individual IT audit project covering IT general controls, application controls, IT infrastructure and security review. Conduct audit on the Bank's internal control environment to identify control weaknesses in IT related controls. When assigned as Auditor-in-Charge, prepare audit report and lead an audit team to undertake assigned audit project to meet audit objectives in a timely and satisfactory manner. Provide value-added findings and appropriate recommendation in written audit report by balancing risks, controls, business and efficiency issues. Prepare audit programs, working papers and audit finding. Follow up on the progress and implementation of rectifications as required to ensure prompt and satisfactory completion. Undertake thematic or ad hoc assignments.

Requirements

  • University degree in information systems, accounting, finance or related disciplines. With recognized professional qualifications under the HKMA Enhanced Competency Framework on Cybersecurity such as CISA, CISSP, CISM, CRISC, CSX-F, CSX-P, CISP-HK and CEH is preferable. Minimum 5 years of internal and/or external IT audit experiences in banking industry. Knowledge on Fin. Tech, including RPA, Artificial Intelligent, Blockchain, Data Analytics, would be an advantage. Proficient in written and spoken English and Chinese. Good analytical, communication and report writing skills. An independent, committed and self-motivated team player with multi-tasking and good interpersonal skills. Candidates with more experience will be considered for a senior role. To apply, please submit your application along with your resume to "recruithk@asia.ccb.com". Applicants who are not contacted within 8 weeks may consider their applications unsuccessful and their personal data will be retained by the bank for a period up to two years. All information provided by applicants will be used for recruitment purposes only and will be used strictly in accordance with the bank’s personal data policies, a copy of which will be provided upon request.