Job Title: Deputy Manager Internal Audit
Report to: Manager IA
Job Location: Nairobi
About the Company
Our client is a leading Deposit taking Sacco licensed by the Sacco Societies Regulatory Authority (SASRA) offering a wide range of products in loans and savings dedicated to the provision of a high level of service. The Sacco is registered under the Cooperative Societies Act Cap 491 and seeks to recruit a dynamic and results oriented individual on threeyear renewable contract terms based on satisfactory performance for the above position.
About the Job
The role is to ensure that the Sacco systems adhere to security regulatory and compliance requirements.
Main Tasks & Responsibilities:
- Collaborate with the Internal Audit team to develop and execute riskbased audit plans focusing on IT systems processes and controls.
- Conduct comprehensive audits of IT systems applications databases networks and infrastructure to assess compliance with internal policies industry regulations and best practices.
- Evaluate the design and operational effectiveness of IT controls including but not limited to access controls change management data integrity and cybersecurity measures.
- Stay abreast of emerging trends technologies and regulatory requirements in the IT and cybersecurity landscape to identify risks proactively and recommend relevant audit procedures.
- Identify potential system vulnerabilities evaluate risk and generate audit findings.
- Suggest enhancements in system controls policies and procedures.
- Reviewing system related policies to ensure that they comply with the legal regulatory and other guiding standards.
- Conducting operational compliance financial and investigative audits as assigned.
- Assisting and training other audit staff in the use of computerized audit techniques and in developing methods for review and analysis of computerized information systems.
- Reviewing internal control procedures and security for systems under development and/or enhancements to current systems.
- Performing information control reviews to include system development standards operating procedures system security programming controls communication controls backup and disaster recovery and system maintenance.
- Coordinating and interacting with external auditors regulators law enforcement officials and other relevant stakeholders in the provision of necessary reports as guided by various regulations.
- Preparation of audit findings reports and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
- Willingness to adapt to evolving technology trends regulatory requirements and organizational priorities.
Requirements
- Bachelors degree in Information Technology or any other related degree.
- Professional certifications such as Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) are required.
- Demonstrate understanding of COBIT principles in evaluating improving the governance and management of enterprise IT.
- Demonstrate understanding of ISO 27001 its applications in assessing the effectiveness of an organizations information security management system.
- Demonstrate understanding of GDPR principles in data protection and privacy controls
- Excellent communication skills in both oral and written English.
- Certified Public Account (CPA K) will be an added advantage.
- Certified Internal Auditor (CIA) as an added advantage.
Skills and Experience:
- At least five years experience in Systems audit or working within a Technology role.
- Developing an understanding of Information Systems Auditing standards and methodology.
- Good project management and organizational skills.
- Excellent written and verbal communication skills to articulate audit findings and recommendations to diverse audiences.
- Collaborating effectively with other members of the team on planning and developing work program timelines risk assessments and other documents/templates.
- Taking a proactive approach in learning and working with other team members within stipulated timelines along with understanding the work quality expectations.
- Fraud Investigation skills.