Job Advert Details
Principal accountabilities: The role holder will support the Head of Audit, Corporate and Institutional Banking (CIB) Technology with the undertaking and delivery of audits, some major and/or highly complex, based on the critical assessment of the IT environment, and of the governance, risk and internal control frameworks that support this.
Group Internal Audit - Group Internal Audit provides independent assurance to management and the Risk and Audit Committees that HSBC’s risk management, governance and internal control processes are designed appropriately and are operating effectively. Undertake general audit activities, as part of a team providing independent, objective assurance over the Group’s internal control framework as well as local regulations and assist business line management by bringing a systematic, disciplined approach to the evaluation and improvement of the effectiveness of risk management, control and governance processes.
- People responsibility: N
- Report to: SVP Internal Audit
- Job content:
- Responsible for providing independent evaluations of internal controls for all IT infrastructure, operations, applications, and projects.
- Undertake risk assessment, control design and operating effectiveness review of business applications, software development and technical infrastructure as part of various global, regional and local IT audits
- Provide consultancy services to IT and business management and other Internal Audit teams, covering IT strategy, architecture, security, risks and controls.
- Based on audit work, draft value-adding audit findings articulating key issues, risks, root causes and action plans.
- Help producing high quality audit reports for review by senior audit management.
- Compliance with Global audit standards while undertaking the audit activities.
- Develop/maintain audit packages for new technology, applications and regulatory requirements.
- Manage the interface between stakeholders to ensure a common approach to and understanding of key deliverables.
- Play an integral role in delivering the audit plan.
- Maintain leading edge knowledge of best practice within audit, financial services and in the risk environment.
信息
- A University degree or equivalent qualification.
- A strong experience in IT auditing, IT security or internal control/operational risk with a minimum 5 years' experience, in at least one of these areas.
- An in-depth understanding of the application systems architecture and strategic risks.
- A broad understanding of the financial services industry and associated regulatory environment.
- Strong technical aptitude, excellent control concept and ability to assess risks.
- Good written and verbal communication skills, analytical, problem-solving and interpersonal skills.
- Role relevant qualifications, e.g. Certified Information Systems Auditor (CISA). Assistance would be given to obtaining the qualification.
- Able to travel for business.
- Good command of English and Chinese, including strong English and Chinese writing skill.
- The job holder is required to obtain the local regulator certified Internal Audit and Internal Control License per the local regulation.
- GPAD covered.
※ 履歷初審合格者，將通知進行甄選面談，資格不符或未獲錄取者則不另行通知。
※ Applicants passing resume screening will be notified for interview and next steps. There will be no further notification or message for applicants either not qualifying for or not being selected for the position applied.