Deputy Head of Risk and Audit, IT

Position Description Responsible for the governance, risk management, and audit coordination frameworks across the global IT function. This role ensures effective identification, assessment, monitoring, and remediation of technology risks, while maintaining strong alignment with internal audit, regulatory expectations, and enterprise risk management standards. Key Areas of Responsibilities Act as the IT central point of contact for Internal Audit, External Audit, and Regulators Coordinate audit planning, fieldwork, and responses across IT teams (tracking, validation, closure) Ensure quality and consistency of audit responses, minimizing rework and findings Operate as the IT faceoff to auditors, regulators, business and IT teams Facilitate regulatory inspections and thematic reviews Track and report remediation progress to senior governance forums Drive timely and sustainable remediation of audit findings and risk issues Prepare and present risk and audit updates to senior management and stakeholders Act as a trusted advisor to CIO, IT leadership, and business stakeholders Conduct periodic control effectiveness reviews and self-assessments e.g. C-SOX Requirements Bachelor’s degree in information technology, Business, or related discipline. Min. 15 years’ experience with 10+ years of experience in IT risk, audit within financial services Strong experience managing regulatory audits and remediation programs Proven track record in building or leading IT governance and control frameworks Strong understanding of Regulatory expectations in financial services Familiarity with audit methodologies and issue tracking tools Strong stakeholder management across IT, Risk, Compliance, and Audit Excellent communication and presentation skills with governance-focused mindset Proficiency in Mandarin and English (written and spoken) is mandatory Stay informed on CITIC CLSA Job Opportunities Not the right fit? You can create a job alert to receive our latest job openings that meet your interest.