Abraham Chan

Assistant Vice President - IT Audit at Shanghai Commercial Bank | CISSP, CISA, CIA, HKICPA

Hong Kong SAR

About

Experience

  • Assistant Vice President - IT Audit at Shanghai Commercial Bank Ltd
    May 2025 - Present · 1 yr 3 mos

  • Senior Manager, Internal Audit (Technology Focus) at livi bank
    Jun 2024 - May 2025 · 1 yr

  • Jardine Matheson ()
    • Senior Manager, Group Audit and Risk Management
      Oct 2022 - May 2024 · 1 yr 8 mos

    • Manager, Group Audit and Risk Management
      Feb 2021 - Oct 2022 · 1 yr 9 mos

    • Assistant Manager, Group Audit and Risk Management
      Feb 2020 - Feb 2021 · 1 yr 1 mo

  • Deloitte China (6 yrs 5 mos)
    • Manager, Risk Advisory - Assurance
      Oct 2018 - Jan 2020 · 1 yr 4 mos

      One of the Managers at the firm’s service line for various independent assessments on IT regulatory guidance from the HKMA, SFC and AMCM. Roles and responsibilities included: - Act as Manager-in-charge on engagement management and liaising with multiple parties at client - Scope and supervise delivery of regulatory compliance assessments, including technical vulnerability assessments and web/mobile/API penetration tests - Perform first-level review of assessment reports and provide ongoing supervision and coaching for field consultants - Conduct onsite interviews and policies and procedures review on the controls applied to processes and systems - Key banking client engagements included: - Comprehensive Independent Compliance Assessment on a global bank's HK retail banking operations according to HKMA requirements - FX trading system, peer-to-peer mobile payment, SMS One-time-passwords and contactless credit card payment - New mobile payment solution for launch in Hong Kong and Macau - Treasury system migration - Securities trading system revamp IT Specialist Service for Financial Audit - Extensive experience in utilizing Computer Assisted Auditing Techniques to extract raw data from client database for verification of application system output’s conformance with expected results based on business logics and compliance with relevant accounting standards. - Adopting Deloitte’s global standards, perform IT Control and Application Control Reviews for various listed and private clients from industries including finance, real estate and manufacturing - Perform internal control reviews according to US-SOX and J-SOX standard

    • Senior, Advisory in Audit - Information & Technology
      Oct 2015 - Oct 2018 · 3 yrs 1 mo

    • Analyst , Enterprise Risk Services
      Sep 2013 - Sep 2015 · 2 yrs 1 mo