About The Role

Position Description

Responsible for the governance, risk management, and audit coordination frameworks across the global IT function. This role ensures effective identification, assessment, monitoring, and remediation of technology risks, while maintaining strong alignment with internal audit, regulatory expectations, and enterprise risk management standards.

Key Areas of Responsibilities

Act as the IT central point of contact for Internal Audit, External Audit, and Regulators
Coordinate audit planning, fieldwork, and responses across IT teams (tracking, validation, closure)
Ensure quality and consistency of audit responses, minimizing rework and findings
Operate as the IT faceoff to auditors, regulators, business and IT teams
Facilitate regulatory inspections and thematic reviews
Track and report remediation progress to senior governance forums
Drive timely and sustainable remediation of audit findings and risk issues
Prepare and present risk and audit updates to senior management and stakeholders
Act as a trusted advisor to CIO, IT leadership, and business stakeholders
Conduct periodic control effectiveness reviews and self-assessments e.g. C-SOX

Requirements

Bachelor’s degree in information technology, Business, or related discipline.
Min. 15 years’ experience with 10+ years of experience in IT risk, audit within financial services
Strong experience managing regulatory audits and remediation programs
Proven track record in building or leading IT governance and control frameworks
Strong understanding of Regulatory expectations in financial services
Familiarity with audit methodologies and issue tracking tools
Strong stakeholder management across IT, Risk, Compliance, and Audit
Excellent communication and presentation skills with governance-focused mindset
Proficiency in Mandarin and English (written and spoken) is mandatory

Stay informed on CITIC CLSA Job Opportunities
Not the right fit? You can create a job alert to receive our latest job openings that meet your interest.