IT Principal / IT Director, Risk Advisory Services

Forvis Mazars is a leader in audit, tax and advisory services worldwide, operating across 100+ countries and territories. Join us to grow your career through global opportunities, diverse projects, and continuous learning. Belong to a supportive environment where your unique perspective is valued, and success comes from teamwork. Impact with your bold ideas and help drive us forward. Risk Advisory Services team provides a wide range of consultancy services, including internal control review, enterprise risk management, compliance review, IT Audit and ESG reporting etc. Join our Risk Advisory Services team in building the resilience our clients need to protect their long-term performance.

Responsibilities

Direct and oversee the analysis and evaluation of client’s IT risks and controls, providing high-level IT risk reduction recommendations and leading the implementation of complex solutions; Lead benchmarking and gap analysis with IT risk-related industry frameworks (e.g., NIST, ISO, COBIT, C-RAF, etc.) to provide strategic advisory to client leadership; Take accountability for scoping, financial management, and delivery risk management, while performing the final quality review of all deliverables; Supervise and mentor project teams to deliver value-added assurance and advisory services to clients; Present and communicate critical IT audit findings and strategic business risks to senior management and clients; Manage and coordinate IT general controls and application controls audit support to external audit; Define the objectives, scope, and extent of major IT audit engagements, ensuring all projects are professionally and efficiently completed within deadlines; Lead security and vulnerability assessments and oversee compliance monitoring reviews to identify control weaknesses and recommend remedial actions; Serve as a strategic advisor to business units and IT groups to assess security requirements and controls; Enforce security control policies and governance frameworks across client organizations

Requirements

Bachelor’s degree in computer science, Information Management, Accounting, or other related disciplines; Minimum 10 years’ experience gained within IT Audit, Cybersecurity, IT Information Security or IT Risk; Professionally qualified in CISA, CPA other specialist skills/qualifications; Strong command of written and oral communication skills (English, Mandarin & Chinese); Strong teamwork ability and able to work independently; Good interpersonal, communication and problem-solving skills; Frequent travel

Benefits

medical and dental insurance; life insurance; 5-day working week; discretionary performance bonus; birthday leave; marriage leave; employee activities