Job summary
The role is to ensure that the Sacco systems adhere to security, regulatory, and compliance requirements.
Job descriptions & requirements
- Collaborate with the Internal Audit team to develop and execute risk-based audit plans focusing on IT systems, processes, and controls.
- Conduct comprehensive audits of IT systems, applications, databases, networks, and infrastructure to assess compliance with internal policies, industry regulations, and best practices.
- Evaluate the design and operational effectiveness of IT controls, including but not limited to access controls, change management, data integrity, and cybersecurity measures.
- Stay abreast of emerging trends, technologies, and regulatory requirements in the IT and cybersecurity landscape to proactively identify risks and recommend relevant audit procedures.
- Identify potential system vulnerabilities, evaluate risk and generate audit findings.
- Suggest enhancements in system controls, policies and procedures.
- Reviewing of system related policies to ensure that they comply with the legal regulatory, and other guiding standards.
- Conducting operational, compliance, financial, and investigative audits, as assigned.
- Assisting and training other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.
- Reviewing of internal control procedures and security for systems under development and/or enhancements to current systems.
- Performing information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
- Coordinating and interacting with external auditors, regulators, law enforcement officials, and other relevant stakeholders in the provision of necessary reports as guided by various regulations.
- Preparation of audit findings reports and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
- Willingness to adapt to evolving technology trends, regulatory requirements, and organizational priorities.
- Bachelor's degree in Information Technology or any other related degree.
- Professional certifications such as Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) are required.
- Demonstrate understanding of COBIT principles in evaluating, improving the governance and management of enterprise IT.
- Demonstrate understanding of ISO 27001, its applications in assessing the effectiveness of an organization's information security management system.
- Demonstrate understanding of GDPR principles in data protection and privacy controls.
- Excellent communication skills in both oral and written English.
- Certified Public Account (CPA K) will be an added advantage.
- Certified Internal Auditor (CIA) as an added advantage.
- At least five years’ experience in Systems audit or working within a Technology role.
- Developing an understanding of Information Systems Auditing standards and methodology.
- Good project management and organizational skills.
- Excellent written and verbal communication skills to articulate audit findings and recommendations to diverse audiences.
- Collaborating effectively with other members of the team on planning and developing work program timelines, risk assessments, and other documents/templates.
- Taking a proactive approach in learning and working with other team members within stipulated timelines along with understanding the work quality expectations.
- Fraud Investigation skills.
Important safety tips
- Do not make any payment without confirming with the BrighterMonday Customer Support Team.
- If you think this advert is not genuine, please report it via the Report Job link below.