Senior Auditor – Group Internal Audit, IT & Cybersecurity (req728)

Hong Kong

Hong Kong Kerry Logistics Network Limited

Responsibilities

The role's primary responsibility is executing audits in areas such as Information Risk Management, Technology Governance, Cybersecurity, Network Security, Identity and Access Management, Data Center Security, Cloud Security, Architecture Reviews, and Business Continuity/Disaster Recovery.

• Assist in developing and maintaining the IT & Cybersecurity internal audit programs, test plans, and requests list, etc.
• Plan and executive audit projects and perform ad hoc reviews or investigations to understand the information technology control environment to assess and evaluate the effectiveness and efficiency of internal controls and operating practices;
• Perform walkthrough, data analysis, and audit testing to identify key risks, assess controls, and develop recommendations on solving or mitigating risks and control issues during audits; ensure all audit work done is properly and timely documented in accordance with the required standards.
• Contribute and assist in the production of meaningful internal audit reports that clearly articulate the position on risks and related issues, clearly communicate potential issues, evaluate corrective action plans, track management’s remediation progress, and perform follow-up reviews to ensure the audited units properly and timely implement audit recommendations.
• Assist the engagement leader in managing audit projects and provide guidance/ coaching to the junior team members.
• Support multiple simultaneous audit projects to meet time and quality objectives.
• Assist with various internal team/department initiatives.
• Engage in continuous knowledge development of the audit techniques and performance standards, relevant rules and regulations, best practices, and audit tools.
  
  

Requirements

• University degree in information systems or other relevant degree, with 3-5 years of experience in a technology audit/risk management role. CISA, CISSP, and/or CISM designation are preferred;
• Good understanding and knowledge of applicable auditing standards and control frameworks, i.e., COBIT, ISO27001/ ISO27002, NIST, ITIL, etc., is an advantage.
• Experience analyzing complex data sets.
• Ability to quickly comprehend business processes, identify risk implications, analyze complex situations, reach appropriate conclusions, and make value-added and practical recommendations.
• Results-oriented with a keen focus on quality and delivering value; ability to balance multiple priorities and projects; strong attention to detail while retaining focus on the “big picture” and top risks; flexible and organized with the ability to oversee multiple projects concurrently.
• Excellent influencing and negotiation skills; professional presence and influence across different areas and levels of management both in Audit Services and Technology.
• Demonstrated ability to work effectively in diverse environments and cultures.
• Highest level of integrity accompanied by strong ethical principles.
• Excellent written and verbal communication skills in English and Chinese.Proficiency in Putonghua is a plus.
• Self-directed and able to work with minimum supervision.
• Highly self-motivated with the ability to multi-task and remain organized.
• Able to travel up to 30% regional/ international travel.
• Candidates with less experience and/ or professional knowledge will be considered for the Internal Auditor role.
  
  

We are an equal opportunity employer and welcomes applications from all qualified candidates. All personal data will be kept in the strictest confidence and will be used for recruitment purpose only. All applicants maybe considered for other suitable positions in Kerry Logistics Network Limited. All personal data of unsuccessful candidates will be destroyed.

我們是平等機會僱主，歡迎所有合資格人士申請職位。申請人所提交之個人資料將絕對保密及只作招聘用途。是次申請或將用作考慮嘉里物流聯網有限公司其他合適之空缺。所有未能成功獲聘者之個人資料將被銷毀。

All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.