About Protiviti

Protiviti is a global consulting firm that helps leaders face the future with confidence. We deliver deep expertise and objective insights across technology, cybersecurity, digital transformation, risk management, compliance, governance, internal audit, and business performance improvement. Our 11,000+ professionals operate across 90+ offices worldwide, serving over 80% of the Fortune 100 and nearly 80% of Fortune 500 companies. Protiviti Inc. is a wholly owned subsidiary of Robert Half (NYSE: RHI).

Why Join Protiviti?

• Work on diverse and meaningful IT audit and technology risk engagements.
• Gain exposure to leading financial institutions and multinational organisations.
• Develop your expertise across IT governance, ITGCs, cloud, data privacy, risk management and operational resilience.
• Collaborate with experienced professionals and subject-matter specialists across Protiviti's global network.
• Leverage innovative tools and data analytics to enhance audit quality and efficiency.
• Grow your career in a collaborative, supportive and entrepreneurial environment.

About Services

Organisations face growing technology risks, regulatory expectations and operational costs. However, technology risk and its potential business impact are not always fully considered in business decision-making. Our Technology Audit and Advisory services help clients understand their technology risk exposure and enhance the effectiveness of their controls. As a Technology Risk Specialist, you will guide clients in managing technology risks, addressing regulatory requirements and enhancing technology governance, controls and resilience.

Major responsibilities:

• Perform IT audit, technology risk assessment and regulatory compliance review for banks, securities firms, insurers, asset managers and multinational organisations.
• Assess IT governance and IT General Controls, including access management, change management, system development and IT operations.
• Review application controls, information security, cloud, third-party risk, business continuity, data protection and emerging technology risks.
• Conduct process walkthroughs, stakeholder interviews, control testing and analysis of audit evidence.
• Assess controls against applicable regulatory requirements and recognised frameworks, including HKMA, SFC, Insurance Authority, NIST and ISO 27001.
• Identify control gaps and assist in developing practical, risk-based recommendations.
• Prepare clear audit / assessment working papers, findings, reports and presentation materials.
• Perform information security awareness training and training program development for clients
• Support project planning, progress monitoring and communication with client stakeholders.
• Use data analytics and audit tools to improve the efficiency and effectiveness of engagements.
• Work effectively as a team member, sharing responsibility, providing support and maintaining communication
• Contribute to proposals, client presentations, knowledge development and other practice initiatives.

Required Experience & Qualifications

• Bachelor's degree in Information Systems, Information Technology, Finance, Business Management or related discipline.
• Relevant 3 - 5 years experience in IT audit, technology risk, IT controls, information security or IT compliance.
• Experience leading small team for IT audit or technology risk engagements.
• Good understanding of IT governance, ITGCs, application controls, technology operations, outsourcing, business continuity and risk management.
• Strong knowledge of HKMA, SFC, and IA requirements relating to technology and cybersecurity risk, and familiarity with industry frameworks such as COBIT, NIST, ISO 27001, and/or ITIL.
• Knowledge of AI governance and AI risk management audits would be an advantage.
• Professional certifications, i.e. CISA, CISSP, CISM, CIA or CRISC is a pus
• Business knowledge of specific industries, e.g. banking, securities, insurance, real estate, manufacturing and /or consumer business would be an advantage
• Strong analytical, problem-solving, documentation and report-writing skills.
• Good communication, presentation and stakeholder management skills.
• Good command of spoken English and Cantonese. Fluency in Mandarin is an advantage.

We offer attractive remuneration package to the right candidate. Interested parties shall email their resume and expected salary to hkhr@protiviti.com. All information received will be kept in strict confidence and only for employment-related purpose.

By clicking 'apply', you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com/hk/en/privacy. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.