The Role
Lead IT audit, risk and compliance assessments; coordinate with internal/external auditors and IT teams; track remediation and prepare management reports; advise on security requirements for projects; develop and review IT security policies; perform risk assessments, trend analysis, and security awareness training.
Summary Generated by Built In
- Work
extensively with Internal / External Audit and Risk Management on IT audit,
risk and compliance assessment
- Engage
with all levels of IT staffs to gather information for audit and assessment
- Tracked
the remediation status of audit and assessment observation and recommendation and
prepare management reports
- Work
with Group IT Security and Information Risk Management to perform risk
assessment
- Involve
in new systems and projects under development as an independent advisor to IT teams
and business to ensure security requirements are embedded into BAU processes and
IT projects
- Develop
and regularly review policies and procedures regarding IT Security
- Perform
risk assessment and trend analysis to ensure that IT risks are identified,
measured,
- recorded
and reported, monitored, and re-mediated timely and within the Company’s risk appetite
- Prepare
materials communicating IT security messages and supporting management reporting
on security and technology performance
- Promote
IT security awareness and conduct regular training for staff
Requirements
- Degree
in Computer Studies, or related disciplines
- Relevant
professional qualifications (e.g. CISA, CISM, and CISSP)
- At
least 3 years of relevant working experience, preferably in banking / insurance
industry
- Strong
control mindset on cyber and technology risk matters
- Able
to articulate IT risk in relation to the business
- Ability
to identify and assess complex IT risks and controls
- Capable
of providing effective challenge and advice while maintaining strong,
respectful relationships with various parties
- Familiar
with relevant regulatory requirements on technology risk management and cybersecurity
relating to Bermuda Monetary Authority (BMA), Insurance Authority (IA), Securities
and Futures Commission (SFC) and Monetary Authority of Macao (AMCM)
- Candidate
who has IT Audit or IT Governance, Risk, and Compliance (GRC) experience will be
an advantage
- Committed,
proactive, assertive and positive with a can-do attitude
- Strong
team player to collaborate with a diverse team
- Thrive
in a fast-paced environment
- Fluent
in both spoken and written English and Chinese
- Candidate
with less experience will be considered as Analyst
Skills Required
- Degree in Computer Studies or related discipline
- Relevant professional qualifications (e.g., CISA, CISM, CISSP)
- At least 3 years of relevant working experience
- Experience in banking or insurance industry
- Strong control mindset on cyber and technology risk matters
- Ability to articulate IT risk in relation to the business
- Ability to identify and assess complex IT risks and controls
- Capable of providing effective challenge and advice while maintaining respectful relationships
- Familiarity with regulatory requirements (BMA, IA, SFC, AMCM) relating to technology risk and cybersecurity
- IT Audit or IT GRC experience
- Fluency in spoken and written English and Chinese
- Committed, proactive, assertive, positive attitude and strong team player
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Teki'Spire Limited is an executive search and recruitment firm specializing in Technology, Data & Digital roles, covering functions such as Digital, Big Data, Business Intelligence, Application Development, and Project Management.
