Key Responsibilities:

• Audit Planning
• Assist in development of a Risk Based IT audit plan aligned to the business objectives of the Bank.
• Develop risk based IT audit programs, tests and checklists to assist in execution of IT audits for various systems in the Bank.
• Audit Execution
• Review IT Policies, Procedures and Processes and controls and provide recommendations for completeness and alignment to the generally accepted ISACA IS Audit Standards, ISO 27001 and other best practices.
• Execute risk- based IS audits in line with the approved IT Audit Plan and make recommendations from improvements; Provide assurance on the effectiveness of the Bank’s IT governance, IT management structure, adequacy of processes to support management in decision making process.
• Assist in Follow up on implementation of audit recommendations from various IT audits carried out by internally and also through external auditors.
• RISK ASSEMENTS
• Evaluate risk management practices in the in order to determine whether IT related risks are adequately managed to avert loses to the Bank.
• Audit Reporting
• Assist the Head of Internal Audit in preparing IT Audit reports for submission to Management and the Board Audit Committee; Present the key IT audit findings to Senior Management.
• Support
• Assist Internal Auditors in developing scripts and data analytics to assist them in their audit work; Offer support in carrying out fraud investigations that involve technical system manipulation.
• Support Internal Auditors in optimizing use of Computer Assisted Audit
• (CAATS) such as Teammate, and data analytic tools such as ACL, IDEA where appropriate.
• Provide advisory on proposed IT developments such as acquisition of new systems and system upgrades to ensure that IT risks are properly identified and controls embedded to mitigate the risks.
• Provide assurance that the practice of acquisition, development, testing and implementation of information systems meet the Bank’s strategies and objectives.
• Provide assurance that the processes for maintenance of the Bank’s information systems is adequate and whether they meet the user’s needs, expectations and overall bank strategy.
• Any other official duties that may be allocated from time to time by management

The Person:

• The ideal candidate must possess the following:

Qualifications

• Bachelor’s degree in Information Technology, Computer science or BBIT from a recognized university. Master’s Degree will be an added advantage.
• Certified Information Systems Auditor (CISA) is desirable.
• Must be a member of Information Security Audit and Control Association (ISACA).
• Certifications in Certified Information Security Manager (CISM), Certified in Risk and Information Systems and Control, Certified Information’s Systems Security Professional (CRISC), Certified Public Accountant (CPA K) will be an added advantage.
• Other IT certifications ICT certifications such as CCNA, MCSE, ITIL, PRINCE2 will be an added advantage.
• 2- 3 years’ experience in carrying out IT audit projects preferably in a financial institution; IT Audit experience in an audit firm will be an added advantage.
• Proficiency in Data Analysis tools ACL, IDEA and other Audit tools such as Teammate will be an added advantage
• Must demonstrate detailed knowledge and practical application of ISACA’s IT Standards and code of ethics for IT Auditors.
• Experience in carrying out audits in other areas such as Credit, Operations, Treasury, Finance within a Bank will be an added advantage; In- depth understanding of Bank operating environment and interlink between IT systems and business operations.
• Technical knowledge in information systems (Particularly Networks, Databases, operating systems and general computer applications); Ability to link technical IT gaps to possible benefits to the Bank.
• Detailed knowledge of information systems governance and security principles and practice e.g. ISO 27001, CIS Controls, NIST CSF, COBIT amongst others.

How To Apply

ALL applicants MUST apply online to the email; [email protected]; closing date is 10th September 2022. Canvassing will automatically disqualify the candidate. Only shortlisted candidates will be contacted.