This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Technology Senior Auditor participates in the timely delivery of high quality, value-added assurance and audit reports for a portfolio of business activities. The suitable candidate should possess relevant knowledge and skills required for auditing one or more areas covering Applications, Infrastructure, Information / Cyber Security, Continuity of Business, and Third Parties including IT Governance and the ITIL-based IT General Controls processes. Exposure to the Kenya Banking Sector regulatory requirements relating to these areas, a good understanding of risk and controls and performing risk assessments of these functions is also essential.
Job Responsibility:
Understand and grasp the audit methodology, corporate standards, and internal control processes and use this knowledge to execute audit reviews
Participate in technology audits by identifying key risks and controls, develop and execute control assessment plans, draft control issues and present them to the technology management, discussing practical solutions
Execute audit assignments through effective collaboration with other audit teams within budgeted timelines and costs
Monitor the risk and control environment of the Technology and Cybersecurity operations including emerging risks by interacting with management and providing feedback through the Business Monitoring process
Assess impact of applicable regulations to the technology processes and adequacy of controls for compliance
Develop and maintain effective line management relationships for a no-surprises approach
Assess appropriateness and sustainability of pragmatic solutions for risk mitigation
Deliver the audit work assigned to a high quality in accordance with the requirements of the Quality Assurance scorecard/ IA methodology
Actively contribute to the automated auditing initiative for efficient and continuous control monitoring
Contribute to various corporate strategic initiatives by active participation and proactive stakeholder engagement
Improve technical knowledge through self-learning and training including mandatory Continuous Professional Development
Requirements:
University Degree (preferably IT related such as Computer Science, Information Technology)
At least 5 years of experience of auditing or managing IT infrastructure systems or applications in a medium to large scale environment, preferably in Banking and Finance field, with strong understanding of related IT risks, controls, and regulations
Specific areas of experience should include cyber risks and controls within the ICT systems and related third-party connections, cybersecurity framework, understanding of threat and vulnerability assessment tests, and penetration tests
Additionally, experience should include Desktop and Server technologies including virtualization and Cloud operations, Databases, Middleware, data and voice networks, Software Development and Production Support practices, Cybersecurity management, and the ITIL general controls processes including IT Governance and IT Program/Project Management
Demonstrated analytical ability to understand IT control issues and related risks and controls, to identify root cause and recommending solutions
Strong written and verbal communications skills in English with ability to clearly articulate issues and facilitate identification and implementation of solutions
Preferred with relevant professional qualifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)
Preferred experience in designing or using Computer Assisted Audit Tools and Techniques (CAATTs)
Working knowledge of the modern banking technology systems
Good project management and interpersonal skills
Nice to have:
Relevant professional qualifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)
Experience in designing or using Computer Assisted Audit Tools and Techniques (CAATTs)