Top multinational insurance company

Role Responsibilities:
• Plan, lead and execute audits within China and evaluate the adequacy of Information System related controls according to established schedule and quality requirements.
• Assist in the preparation of the annual audit plan and schedules and Audit Committee reports.
• Coordinate and co-operate with external auditors to leverage review work done so as to minimise interruption to business units. Partner with financial auditors to assess application IT controls related to key business processes.
• Review or prepare audit reports and lead discussion of issues and remedial action plans with the appropriate levels of management.
• Facilitate issuance of audit reports to management.
• Follow-up outstanding audit issues and monitor timely completion of agreed remedial actions by management.
• Proactively contribute to the development of the team through coaching, training and providing timely feedback to junior staff.

Requirements:
• Minimum 10 years of IT audit, IT operations or solid technology risk management experience, preferably with regional experience is an advantage, in at least one of the following areas:
• Cybersecurity
• Network Security
• Platform Security (AS/400, Windows, Linux, Unix)
• Database Security (Oracle, MS SQL, Sybase, DB2)
• Mobile Security
• Endpoint Security
• IT Operations
• Software Development Life Cycle
• Threat and Vulnerability Management
• Certificate holder of Certified Information Systems Security Professional (CISSP)/ Certified Information Systems Auditor (CISA)/ Certified Information Security Manager (CISM)
• Strong understanding on IT controls and risks
• Prior team management experience is preferred
• Good command of both oral and written English and Chinese
• Experience in presenting audit issues to members of Senior Management / ExCo, Board or Audit Committee is preferred
• Knowledge with audit tools and other software such as ACL (data analytic tools) and MS Office

• Minimum 10 years of IT audit, IT operations or solid technology risk management experience, preferably with regional experience is an advantage, in at least one of the following areas:
• Cybersecurity
• Network Security
• Platform Security (AS/400, Wind