Description

FIND YOUR 'BETTER' AT AIA

We don't simply believe in being 'The Best'. We believe in better - because there's no limit to how far 'better' can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we'd love to hear from you.

About the Role

The role is responsible for planning, leading, and executing IT audit engagements across Hong Kong, ensuring alignment with Group Internal Audit (GIA) standards. The position partners with business auditors, IT teams, and Information Security teams to assess technology controls, manage emerging risks, and enhance audit capabilities.

Roles and Responsibilities

• Work closely with the CTO, local IT, and Information Security teams to maintain the IT audit universe and develop and deliver the IT audit plan for assigned locations, as required.
• Support the annual audit planning process, contributing to a risk-based, well-reasoned audit plan covering key IT auditable areas.
• Lead and oversee assigned IT audit engagements, ensuring audits are executed and completed in accordance with Group Internal Audit (GIA) Standards.
• Partner with business auditors to assess application, technology, and information security controls supporting key business processes.
• Act as a subject matter expert within the audit team on IT-related regulatory developments and emerging technology risks.
• Contribute to internal audit capability by sharing knowledge of business systems, data, and automated controls, and by supporting the development of the Hong Kong audit team's automated testing approach.
• Facilitate collaboration with business auditors and data specialists on areas including control automation initiatives, data governance, and technology-enabled audit techniques.
• Contribute to Group IT audit practices through the application of relevant technical skills, audit expertise, and business knowledge.
• Build and maintain effective working relationships with key IT management through regular engagement, in order to remain informed of emerging risks, significant changes, and control issues.
• Prepare and review audit reports, in collaboration with fieldwork auditors, in accordance with Quality Assurance Review (QAR) requirements.
• As auditor-in-charge, manage, coach, and review the work of audit team members, shared services, and co-sourced resources, ensuring compliance with GIA standards and quality expectations.
• Lead and facilitate discussions with management on audit issues, root causes, and agreed remedial action plans, including escalation where appropriate.
• Monitor and follow up on outstanding audit issues, and track the timely completion of agreed management actions.
• Proactively maintain professional development through formal training and on-the-job learning.
• Perform ad-hoc responsibilities assigned by the Head of Internal Audit Hong Kong and/or the Group Head of Internal Audit to meet operational or business requirements.

Minimum Job Requirements

• University degree in Information Technology, Computer Science, or a related discipline, or equivalent professional experience.
• Minimum 10 years of experience in IT audit, technology risk, or information security risk management, with demonstrated experience leading complex audit engagements.
• Professional certification such as CISA, CISSP, and/or CISM, with a strong understanding of IT controls, technology risks, and governance practices.
• Proven experience auditing one or more of the following technology areas: IT infrastructure, IT operations, network security, cybersecurity, vulnerability management, application security, system development lifecycle, and business continuity management.
• Demonstrated ability to support business audits through the identification, testing, and reporting of automated application controls.
• Experience with cloud computing environments is an advantage.
• Hands-on experience applying data analytics and visualisation techniques in an audit or risk context. Experience with scripting or coding languages is considered a plus.
• Solid problem solving skills, ability to analyse complex data, identify control weaknesses and root cause, assess impact and discuss audit issues effectively with management to reach appropriate conclusions
• Confident and strong written/verbal communication and presentation skills and be able to engage multiple internal and external stakeholders across Hong Kong and Group functions.
• Ability to work independently and manage priorities under pressure, with minimal supervision, while meeting time, cost, and quality expectations.
• Good command of spoken and written English and Chinese. Fluency in Putonghua is preferred.

Other Requirements

• You are required to obtain relevant license if your job involves in regulated activities.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.