IT Audit, Risk Advisory Services

Forvis Mazars is a leader in audit, tax and advisory services worldwide, operating across 100+ countries and territories. Join us to grow your career through global opportunities, diverse projects, and continuous learning. Belong to a supportive environment where your unique perspective is valued, and success comes from teamwork. Impact with your bold ideas and help drive us forward. Risk Advisory Services team provides a wide range of consultancy services, including internal control review, enterprise risk management, compliance review, IT Audit and ESG reporting etc. Join our Risk Advisory Services team in building the resilience our clients need to protect their long-term performance.

Responsibilities

Learn and build your knowledge on how to conduct IT audit over general/ application controls, network security, cybersecurity, blockchain platform operations, and apply Computer Assisted Auditing Technique ("CAAT") for data verification, cyber hacking incident investigation; Contribute to execution of IT-related risk assessments in the following areas: cybersecurity, IT strategy and governance, IT operations, business continuity and disaster recovery, network and infrastructure security, cloud and third party risk, programs and projects, automation, GITCs and application controls, and regulatory/compliance requirements; Obtain good understanding of IT infrastructure, programs, networks and database, IT security, identify areas of improvement and make recommendations; Work with client management team to assist in implementation of new processes and controls to address key risks, as necessary; Draft comprehensive executive summaries and final reports for delivery to client senior management and document and review engagement workpapers in accordance with standard Forvis Mazars and industry-accepted methodologies; Assist in kickoff, status, and closing meetings with engagement team and client and contribute to technology risk knowledge base and internal practice development initiatives

Requirements

Degree holder in Information Technology or related discipline; At least 1-2 years of IT audit experience in Audit or consulting firms; OR professional experience as an internal employee working on IT risk or IT compliance related function; Fluency in spoken English and Cantonese. Putonghua is a must; Good written presentation skills in both English and Chinese; Logical thinker with good interpersonal and communication skills; Willing to travel (more than 50%) and ability to work diligently under pressure

Nice to have

Member or finalist of professional qualification preferred such as CISA, CISSP or CISM (either one only), HKICPA, ACCA, CPAA; Fresh graduates are also welcome

Benefits

medical and dental insurance; life insurance; 5-day working week; discretionary performance bonus; birthday leave; marriage leave; employee activities