Sr. Associate/Associate–IT Audit, Financial Services (Technology Risk Assurance)

Job Summary

As a Senior Associate/Associate in the Technology Risk Assurance team, you will play an integral role in external audit engagements, performing independent assessments of clients' IT systems and controls to support audit opinions on financial statements. Your work will cover Hong Kong-listed companies, multinational corporations, financial institutions regulated by HKMA/SFC, and Mainland Chinese enterprises with cross-border operations, all in full compliance with HKSAs and HKFRS.

With BDO Technology Risk Assurance, you will have access to exceptional opportunities for professional growth, exposure to a wide range of clients, and participation in various learning programs. These programs include audit training, technology training, and business skills coaching that will facilitate your career advancement. Our competitive compensation package, coupled with our emphasis on work-life balance, ensures that our employees have ample time for leisure, social life, personal learning, and family commitments.

What you'll be doing

• Collaborate with financial audit teams to understand their audit objectives, identify areas of risk, and determine reliance strategies on IT controls and system-generated data
• Perform risk‑based IT audits, including walkthroughs and testing of IT General Controls (ITGC) and IT Application Controls (ITAC), including automated interface and data-flow controls between ERP, operational, and financial reporting systems
• Evaluate control deficiencies, assess their impact on financial statement assertions, and support ICFR compliance for clients subject to SFC/HKEX listing requirements
• Present findings to audit teams and client management, from IT managers to senior management, translating technical control failures into commercial consequence
• Provide guidance and mentorship to junior team members, reviewing their workpapers and offering constructive feedback to support their professional development and career growth
• Demonstrate a strong commitment to the firm's core values and competency expectations, upholding professional integrity, independence, and excellence in all aspects of audit delivery
• Support and act towards the BDO Global Vision.
• Be committed to act with the firm’s core values and competency expectations.

What you'll bring

• Bachelor’s degree or above in Information Technology, Computer Science, Data Science, Accounting, Finance, or related discipline
• At least 2 years (for Associate: 1–2 years) in financial audit, IT audit, data analytics, IT risk, or technology risk advisory
• Hands‑on experience in ITGC/ITAC testing, control documentation, and integration with financial audits
• Exposure to IT audit, ITGC/ITAC, or technology risk and controls concepts
• Strong analytical and communication skills and the ability to present complex information in a clear and concise manner
• Self‑motivated, detail‑oriented, and capable of managing multiple assignments under tight deadlines; a collaborative team player with professional integrity and willingness to business trip
• Excellent written and spoken English; proficiency in Cantonese and Mandarin is highly preferred

Preferred attributes

• Knowledge of financial audit processes, methodologies, and procedures is highly desirable.
• Familiarity with COBIT, COSO, and common ERP systems and accounting systems.
• Programming or analytics skills (e.g., Python, SQL, Power BI, Tableau) considered an advantage.
• Progress toward CISA, CPA, or a comparable qualification.
• Keen interest in staying current with emerging technologies, international standards, and regulatory developments.

We are an equal opportunity employer, and offer excellent prospects and career development for the right candidate. Interested parties please send your application with full career history, current and expected salary by clicking Apply Now button below.

Applications will be treated in strict confidence. Personal data collected will be used for recruitment purposes only.