We are looking for high-calibre individuals to join the Group Internal Audit Department for serving the HKMC Group.

Job Descriptions:

• Conduct regular risk assessments and assist in developing a risk-based IT audit plan;
• Lead and conduct thematic IT audits of the Group’s IT environment and system operations;
• Collaborate with business auditors in operational audits by reviewing application controls and deploying data analytics;
• Identify opportunities to strengthen IT governance, risk management, internal controls, and regulatory compliance;
• Conduct non-assurance projects such as system pre-implementation reviews, regulatory compliance readiness assessments, or incident investigations; and
• Prepare audit and consultancy reports with practical recommendations for management and the Audit Committee.

Requirements:

• Degree holder in IT, Computer Science, Management Information Systems, or related disciplines, ideally holding qualifications such as CISSP, CISA, CISM, CCSP, or GSNA;
• A minimum of 8 years of hands-on IT audit or cybersecurity experience, preferably with the financial services sector;
• Familiarity with IT-related regulatory requirements for financial institutions;
• Knowledge of data analytics and visualisation tools (e.g., SQL, Power BI, Tableau) and generative AI would be an advantage;
• Independent, self-motivated, well-organised, with strong analytical and interpersonal skills; and
• Excellent communication skills with a strong command of written and spoken English and Chinese.

Interested parties please send your full resume stating your current and expected salary by 1 April 2025.
Please visit http://www.hkmc.com.hk/eng/careers/job_openings.html for other application methods.
Please ensure that all information provided to the HKMC Group is accurate, complete and updated. Data provided which is inaccurate or incomplete may influence the process and outcome of the recruitment exercise. Please read the HKMC Group Personal Information Collection Statement for Job Applicants at the HKMC website before completing the application form. Personal data collected will be used for recruitment purposes only. Candidates not invited for interview within 8 weeks may consider their application unsuccessful.