Our client, a major enterprise in Hong Kong, is seeking an IT Audit Programme Portfolio Manager within the organization, responsible for overseeing all aspects of the IT audit program. This role will involve working with a team of auditors, developing and implementing audit plans, oversight of audits, and providing reporting. The successful candidate will have strong leadership skills, technical knowledge, and a proven track record of effectively managing complex projects.
Develop and execute a comprehensive IT audit program, ensuring alignment with business objectives and regulatory requirements.
Work with a team of IT auditors, providing guidance, and support to ensure optimal performance and professional growth.
Oversight and coordination of Audit plans in IT systems, processes, and controls to identify areas of risk and non-compliance.
Utilize industry frameworks and standards (e.g., COBIT, ISO 27001) to assess the effectiveness of IT governance and control frameworks.
Monitor and report on key risk indicators, recommending proactive measures to mitigate identified risks.
Collaborate with cross-functional teams to identify and implement opportunities for process improvement and increased operational efficiency.
Stay up-to-date with emerging technologies, industry trends, and regulatory changes to ensure audit practices remain relevant and effective.
Develop and maintain strong working relationships with key stakeholders, including senior management, IT teams, and external auditors.
Prepare and deliver comprehensive audit reports, summarizing findings, recommendations, and corrective actions required.
Oversee the implementation of audit recommendations, tracking progress and monitoring compliance.
Qualifications and Skills:
Bachelor's degree in information systems, computer science, or a related field. Relevant certifications (e.g., CISA, CISSP) are highly desirable.
Proven experience as an IT audit manager as well as in the Programme Management field, with a minimum of 10 years of experience in leading IT audit engagements or Programme Management.
Strong understanding of IT governance, risk management, and control frameworks, with the ability to apply them in practice.
Knowledge of industry-specific regulations and standards (e.g., GDPR, HIPAA, SOX).
Experience conducting audits within an enterprise-level organization and managing multiple projects simultaneously.
Excellent analytical skills, with the ability to identify trends, patterns, and potential risks related to IT controls and processes.
Strong leadership abilities, with the capability to inspire and motivate team members towards achieving audit objectives.
Exceptional communication and interpersonal skills, with the ability to effectively engage and influence stakeholders at all levels of the organization.