Technology Audit and Advisory - Senior Consultant
Core
Guide clients in managing technology risks, addressing regulatory requirements, and enhancing technology governance, controls, and resilience for financial institutions and multinational organizations.
Role type
Senior IC technology audit and advisory consultant
Builds
IT audit reports, risk assessments, control testing findings, and regulatory compliance reviews
Domain
Financial services (banking, securities, insurance) + IT governance and risk management
Required skills
IT audit, technology risk assessment, regulatory compliance review, IT governance, ITGCs, application controls, information security, cloud risk, third-party risk, business continuity, data protection, data analytics, report writing
Preferred skills
AI governance audits, industry-specific business knowledge (banking, securities, insurance, real estate, manufacturing, consumer), Mandarin fluency
Technologies
COBIT, NIST, ISO 27001, ITIL, HKMA, SFC, Insurance Authority frameworks
Responsibilities
Perform IT audit and technology risk assessment for banks and insurers; Assess IT governance and ITGCs including access and change management; Review application controls, security, cloud, and third-party risks; Conduct process walkthroughs, stakeholder interviews, and control testing; Identify control gaps and develop risk-based recommendations; Prepare audit working papers, findings, and reports; Perform information security awareness training; Support project planning and stakeholder communication.
Seniority
Senior, hands-on IC with team leadership
