Manager, IAFA-Tech Audit & Advisory

• Work on diverse and meaningful IT audit and technology risk engagements.
• Gain exposure to leading financial institutions and multinational organisations.
• Broaden your expertise across IT governance, ITGCs, cloud, risk management and operational resilience.
• Collaborate with experienced professionals and subject-matter specialists across Protiviti's global network.
• Use innovative tools, data analytics and technology-enabled approaches to deliver greater client value.
• Develop your leadership capabilities and advance your career in a collaborative, supportive and entrepreneurial environment.

About Services

Organisations face growing technology risks, regulatory expectations and operational costs. However, technology risk and its potential business impact are not always fully considered in business decision-making. Our Technology Risk and Audit services help clients understand their technology risk exposure and enhance the effectiveness of their controls. As a Technology Risk Specialist, you will guide clients in managing technology risks, addressing regulatory requirements and enhancing technology governance, controls and resilience.

• Lead and manage IT audit, technology risk assessment and regulatory compliance review for banks, securities firms, insurers, asset managers and multinational organisations.
• Assess the design and operating effectiveness of technology controls and evaluate clients' control environments against regulatory requirements, industry standards and leading practices.
• Conduct technology governance, cybersecurity and regulatory compliance reviews with reference to applicable Hong Kong regulatory requirements, including those issued by the HKMA, SFC and Insurance Authority, as well as recognised frameworks such as COBIT, NIST, ISO 27001 and ITIL.
• Identify control gaps, root causes and areas for improvement, and develop practical, risk-based recommendations that are proportionate to the client's business and regulatory environment.
• Prepare clear and concise reports, presentations and other client deliverables, and communicate audit findings and recommendations to senior management and relevant stakeholders.
• Manage engagements throughout the project lifecycle, including project scoping, work planning, resource allocation, budgeting, progress monitoring, quality assurance and delivery risk management.
• Build trusted relationships with clients, manage stakeholder expectations and support senior team members in maintaining strong relationships with the clients.
• Support business development activities, including identifying client needs, preparing proposals and offerings, participating in client pitches and contributing to go-to-market initiatives.
• Supervise, coach and develop junior team members.
• Collaborate with Global and APAC teams to develop and adopt AI for Internal Audit
• Develop internal networks and maintain excellent relationships with colleagues across Protiviti in Hong Kong and across APAC

• Bachelor's degree in Information Systems, Information Technology, Finance, Business Management or related discipline
• Minimum 6 years of relevant experience in IT audit, technology risk, IT controls or cybersecurity, preferably within financial services or professional services.
• Experience leading IT audit or technology risk engagements and managing client stakeholders
• Strong knowledge of IT governance, ITGCs, application controls, system and network security, cloud risk, outsourcing, third party risk, business continuity and data protection
• Familiarity with Hong Kong financial services regulations (HKMA, SFC and IA) and frameworks such as COBIT, NIST, ISO 27001 and/ or ITIL.
• Professional certifications, i.e. CISA, CISSP, CISM, CIA, CRISC, ISO 27001 lead auditor and / or other related certifications would be an advantage
• Excellent written and spoken English and Cantonese. Fluency in Mandarin is an advantage