Deputy Manager, IT Audit

Deputy Manager, IT Audit at Kerry Properties Limited

The Deputy Manager, IT Audit will report to the Senior Manager, IT Audit and Director of Internal Audit. This role is responsible for executing standalone and / or integrated IT related audit engagements across the Group’s major application systems, infrastructure and projects, including operating systems, databases, networks, and cybersecurity. The position aims to identify key risks and control deficiencies, ensuring high-quality audit and advisory services that enhance internal control effectiveness and provide robust assurance enterprise-wide risks.

Responsibilities

• Support the Senior Manager, IT Audit in defining IT audit objectives, developing audit methodologies, and formulating the annual audit plan.
• Apply risk-based auditing techniques to ensure effective planning and execution of audit assignments.
• Conduct audits to evaluate the adequacy and effectiveness of control procedures.
• Identify and assess risk areas and propose actionable solutions to mitigate potential threats.
• Prepare comprehensive audit reports and present the findings and recommendations to Senior, Middle, and Line Management.
• Perform follow-up reviews to verify the implementation of audit recommendations, monitor progress, and report resolution status.
• Collaborate with Financial / Operational audit teams to address IT related aspects of business units and project audits.
• Keep up to date with the latest regulatory requirements relating to cybersecurity and risk management processes.
• Assist in developing the management dashboard and the Robotic Process Automation (“RPA”) initiatives within the Internal Audit department.
• Carry out ad-hoc reviews and special projects as assigned.

Requirements

• Degree in Accounting, Finance, Information Systems, Computer Science, or related discipline.
• Minimum of 10 years of professional experience, in which at least 5 years in IT audit / IT compliance.
• Holder of professional qualification such as CISA, CISSP, CISM, or equivalent designation.
• Experience in working in large corporations, including sizeable HK private companies, listed companies, or MNCs.
• Experience in leading small teams to deliver audit work.
• Experience in risk appraisal and management techniques.

Key skills/competency

• IT Audit
• Cybersecurity
• Risk Management
• Internal Control
• Audit Planning
• Compliance
• Application Systems
• Infrastructure
• CISA
• CISSP