IT Audit Manager

Shift Pattern:

Scheduled Weekly Hours:

Corporate Grade:

Reporting Line:

Location:

Worker Type:

The London Metals Exchange (LME) is the largest metal exchange in the world and is a wholly owned subsidiary of Hong Kong Exchanges and Clearing Limited (HKEX) one of the worlds largest publicly listed securities exchanges.

LME Clear (LMEC) provides clearing services to all LMEs clearing participants. LMEC launched in September 2014.

The IT Audit Manager will report into and be responsible for working with the LME Senior IT Audit Manager in the execution of the annual internal audit plan as well as contributing to the assessments of risks within the IT and related IT Audit Manager will have regular liaison with HKEX Group Internal Audit (GIA) especially regarding IT audit work as LME Internal Audit forms part of GIA.

Responsibilities:

The IT Audit Manager reports to the LME Senior IT Audit Manager and is the Manager-in-Charge to conduct IT audits in accordance with the annual audit plan. This role also supports and contributes to departmental initiatives. The detailed responsibilities of the role include:

• Independently manage and lead IT audits from planning risk-based audit scope through fieldwork execution to reporting in accordance with GIAs audit methodology to ensure audits are run effectively and key issues are identified and reported.
• Demonstrate ability to critically assess processes and develop testing strategies to evaluate design and effectiveness of key controls. Independently articulate potential control gaps and risk exposures to stakeholders.
• Leverage innovation/ automation audit techniques to increase effectiveness and efficiency of the audit program.
• Independently conduct continuous risk monitoring and assessments of the IT operations to identify emerging / high-risk areas for coverage.
• Manage stakeholder relationships and proactively provide risk and control advice with an aim to improve the Groups control environment. Challenge and influence management to implement effective controls.
• Develop sound knowledge of the Groups strategy products risk management processes and operating platforms. Consider broader enterprise risks and LMEs strategic objectives.
• Stay current with the industry development business and IT trends. Conduct research on industry and risk topics to increase effectiveness of audit coverage and Internal Audits ability to add value to the LME Group.
• Engage in ad-hoc audit activities such as review of key firmwide change initiatives and regulatory requests.
• Validate remediation of audit issues in an effective and timely manner.
• Participate and contribute to departmental initiatives such as continuous improvement of GIAs audit methodology.
• Support the preparation of materials for senior management Audit Committee and regulators.

Academic and Professional Qualifications Required:

• University degree preferably in Information Systems or other related subject
• Relevant professional qualifications such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) or Certified Internal Auditor (CIA) etc preferred.

Required Knowledge and Level of Experience:

• At least 3 to 10 years of work experience in internal or external audit risk management compliance cybersecurity preferably with professional firms or financial institutions. Other relevant expertise will also be considered
• Strong understanding of industry cybersecurity standards such as National Institute of Standards and Technology (NIST) Cybersecurity Framework ISO 27001 CIS etc.
• Strong understanding of the underlying IT risks application controls assessment practices and various IT security software operating systems databases telecommunication and networking technologies.

Skills set and Core Competencies Required for Role:

• Team-oriented with a strong sense of ownership and individual accountability.
• Demonstrate agility and the ability to drive and adapt to changes in a fast-changing environment.
• Strong communication and relationship management skills.
• Experience in leveraging data and technology.
• Highly motivated self-starter with the ability to multi-task and remain organised
• Ability to demonstrate sound judgment and professionalism
• Demonstrate an interest in developing commercial awareness

Good report writing and presentation skills

Personal Qualities:

• Integrity
• Independent
• Proactive
• Strong analytical report writing and presentation skills
• Build partnerships across the Group

The LME is committed to creating a diverse environment and is proud to be an equal opportunity

recruiting for our teams we welcome the unique contributions that you can bring in terms of education ethnicity race sex gender identity expression & reassignment nation of origin age languages spoken colour religion disability sexual orientation and doing so we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication.