Advisory – Information Technology Risk and Assurance (ITRA) – Staff Consultant recruitment

Engagements may be either assurance (attestation) and/or risk advisory in nature, and vary considerably in size and complexity. All of our ITRA services, whether in assurance or advisory nature, are designed for the dual purpose of strengthening internal controls and improving IT and business performance. In addition to assurance-related engagements, our IT risk advisory services also focus on IT governance and effectiveness, IT project risk management, security and controls of Enterprise Resource Planning (ERP) implementations, business intelligence and information analysis. The variety of projects that we work on involved ERP selections and implementations, core banking system migrations, insurance administration system development and implementations, and large scale web based developments and deployments.

Responsibilities:

• Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents.

• Work with the engagement team to document the business processes dependent on information technology.

• Demonstrate and apply a thorough understanding of complex information systems, use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team and client management through written correspondence and verbal presentations. 

• Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services.

Requirements:

• Bachelor's or Master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline and/or a professional certification i.e. CISA, CPA, CA, CISSP, CISM, CBCP, CIA, CFE, ISO 27001 leader auditor, ISO 20000 leader auditor, BS25999 leader auditor, PMP, and ITIL V3 certification.

• A minimum of 2 years’ experience working on IT systems or projects as developer, implementer, system analyst, project coordinator, or as an IT auditor or IT risk advisor for commercial or public organizations, or for other public accounting firm or professional services firms.

• Significant experience in applying relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c)  information security or privacy reviews; (d)  ERP security/control reviews or implementation; (e) implementation on related ISO/ professional certifications; and/or (f) any development and implementation of medium to large scale system applications;

• Strong project management skills.

• Strong communication skills and presentation skills.

• Demonstrated leadership and client services skills.

• Demonstrated integrity within a professional environment.

• Excellent command of written and spoken Cantonese, English and Mandarin.