About the client

Our client is a leading PRC securities .

Job Responsibilities:

• Conduct yearly IT audits, review and special projects
• Prepare IT audit reports, present investigation findings and offer recommendations
• Assist to develop audit plans of designated areas in IT Audit
• Evaluate the risk management, regulatory compliance processes and internal controls systems
• Maintain and develop internal audit policies, procedures
• Conducting IT security monitoring & security assessment for network, systems and applications including but not limited to; vulnerability scanning, penetration test, technical security assessment;
• Establish a control framework in conducting periodic review and technical assessment when needed, including but not limited to; phishing attack simulation, penetration test, vulnerability scanning;
• Identify inefficiencies and control weaknesses, explore methods for improvement and implement remediation security controls based on IT initiatives on technology risk perspective;
• Provide proactive consultative advice that leads to improvements in risk control and governance systems;
• Perform business continuity and disaster recovery planning and execution.

Job Requirements:

• Bachelor degree in Accounting, Finance ,Computer Science or a related subject from an accredited institution;
• Holder of CISSP, CISM or CISA preferred;
• 5 years of IT Audit experience in gained in Big 4 and in house
• Good command of English and Chinese
• Passionate in InfoSec and Cybersecurity area
  

All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.