全职 Senior Manager-Manager–IT Audit, Financial Services (Technology Risk Assurance) 工作, 薪水, BDO Hong Kong 公司招聘中 - Ricebowl

Job Summary

As a Senior Manager / Manager in BDO's Technology Risk Assurance (TRA) team, you will manage the IT audit work on our financial services engagements: licensed banks, virtual banks, insurers, and other institutions supervised by the HKMA and the Insurance Authority.

What you'll be doing

• Manage the IT audit workstream on external audits of banks and insurers: plan the approach with the engagement partner, agree reliance on IT controls and system-generated data, and own the IT conclusions the audit team relies on.

• Direct walkthroughs and testing of ITGC and ITAC, including automated interface and data-flow controls between core banking, treasury, payments, policy administration, claims, actuarial and general ledger systems.

• Evaluate the system and data controls behind the highest-judgement balances, such as expected credit loss under HKFRS 9 and insurance contract measurement under HKFRS 17, where a data failure becomes a material misstatement.

• Assess control deficiencies, determine their impact on financial statement assertions and regulatory compliance, and present conclusions to audit committees.

• Turn regulatory change into audit approach: translate developments under the HKMA Supervisory Policy Manual, C-RAF, operational resilience requirements and the Insurance Authority's revised GL20 into risk assessment and testing for the engagement team.

• Lead, coach and review: develop Senior Associates and Associates, review workpapers to HKSA documentation standards, and conduct performance appraisals.

• Support business development: scope financial services tenders, contribute to proposals and fee estimates, and build lasting relationships with client technology and finance leadership.

• For Senior Manager: take portfolio-level ownership of financial services engagements, including budgets, staffing and recoveries; act as the senior day-to-day contact for client leadership; develop the Managers in the team; and lead tenders alongside the partner.

• Champion the firm's core values, independence and quality standards, and shape the financial services methodology and knowledge base the team works from.

• Support and act towards the BDO Global Vision.

• Be committed to act with the firm’s core values and competency expectations.

  
  

What you'll bring

• Senior Manager: 9+ years in IT audit, technology risk assurance or technology risk advisory, including at least 4 years serving banks and/or insurers and 2+ years managing engagements.

• Manager: 6+ years in IT audit, technology risk assurance or technology risk advisory, including at least 3 years in financial services. For both levels, advisory or internal audit experience counts where it involved hands-on testing of IT controls.

• Bachelor's degree or above in Information Technology, Computer Science, Information Systems, Accounting, Finance or a related discipline.

• A recognized professional qualification: CPA / CISA required; CRISC, CISSP or CIA also valued.

• Expert command of ITGC/ITAC testing in regulated financial institutions, and of how IT controls support financial statement assertions under HKSA 315.

• Working knowledge of core banking and/or insurance systems, and of how a loan, deposit, trade or policy moves from front office to general ledger.

• Familiarity with HKMA and Insurance Authority technology risk expectations (Supervisory Policy Manual technology modules, C-RAF, operational resilience, revised GL20 / CRAF) and with the Banking Ordinance and Insurance Ordinance.

• Excellent written and spoken English; given our Hong Kong and Mainland client base, Cantonese and/or Putonghua is highly valued.

• Able to manage several engagements under audit and regulatory deadlines, with occasional travel within Greater China.

If you meet most of the above but not every line, we would still like to hear from you.

We are an equal opportunity employer, and offer excellent prospects and career development for the right candidate. Interested parties please send your application with full career history, current and expected salary by clicking Apply Now button below.

Applications will be treated in strict confidence. Personal data collected will be used for recruitment purposes only.