Assistant Vice President, Internal Audit (IT)

Ref:AVP/021026DB/1037

Principal Duties & Responsibilities 主要職責及任務:

1. Assists the Head / Vice Presidents of IA in overseeing and managing the IT audit function of the China Everbright Securities International (“the Group”), and advising on the design and implementation of significant internal controls and risk management procedures.

2. Participates and monitors the proper completion of audit assignments under IT Audit Team in accordance with the approved annual audit plan and ensures the quality of audit work.

3. Promptly reports to the Head/ Vice Presidents of IA of any exceptions, irregularities or potential non-compliances with the Group’s policies and procedures, or legal and regulatory requirements noted.

4. Performs follow up and updates on the implementation of audit recommendations by auditees.

5. Contributes to planning, implementing and enhancing digital solutions for internal audit, including coordination with stakeholders and vendors, providing risk and control perspectives on design, and supporting QA and go-live activities.

6. Works with the Head of IA and other IA staff to achieve the departmental KPI and identifies work flow efficiency improvement and cost savings opportunities.

7. Undertakes special tasks, project-related assignments and other administrative duties as directed by the Head / Vice Presidents of IA from time to time

Job Specification 工作詳細說明:

a. Qualification 履歷

• Degree holder in related disciplines (preferably Information Technology Degree);

• Certified with Hong Kong Institute of Certified Public Accountants (HKICPA) or other professional accounting bodies preferred;

• Certified Information System Auditor preferred.

b. Experience 從業經驗

• 7 years or above external / internal IT audit experience obtained from financial institutions or big CPA firms.

c. Knowledge 其他技能

• Good knowledge of the operations in financial industry and related regulations;

• Attentive to details and able to work independently and as a team. Willing to take initiative with impeccable integrity and possess a strong sense of responsibility;

• Some exposure to or familiarity with system implementation or digitalization projects;

• Familiarity with AI applications or knowledge management platforms is a plus;

• Good technical knowledge on Windows, relational database, and IT security controls;

• Good knowledge of different data file formats, file access methods, data analysis, data mining and Microsoft Office tools, and skillful in handling data and evidence carefully and securely;

• Sound technical knowledge of risk and control in various IT domains such as IT infrastructure, Cloud, Cybersecurity, SLDC as well as other key areas including BCP/ITDR, project management, database, technology risk framework;

• Good command of both written and spoken English and Chinese, and possesses good report writing skills.