Information System Auditor

About the role

GA Insurance is hiring a full-time Information System Auditor in Nairobi. The role provides independent assurance on the Group's information systems by checking that risk management, governance processes and controls are adequate to protect them. The position is open until 16 November 2026.

Key responsibilities

• Take part in developing, implementing and monitoring the annual information systems internal audit plan.
• Assess all business information systems to judge the adequacy, effectiveness and efficiency of controls.
• Evaluate controls for data protection, change management and cyber security.
• Run compliance checks against NIST, ISO, PCI DSS and the Data Privacy & Protection Act.
• Report audit results and recommendations to management and business process owners.
• Work with the Technology Services and IT security teams to ensure effective controls.
• Review IT governance documents, strategies, policies, contracts and procedures.
• Advise on information security incidents and emerging risks.
• Support audit reports, Board Audit Committee files and internal audit services for GA Life, GA Uganda and GA Tanzania.

Required profile

• Bachelor's degree in Accounting, Finance, Commerce, Economics, IT or a related field.
• Minimum of 3 years of experience in motor claims general insurance.
• Preferred: CISA, CGEIT, CISM or CIA certification.

Required skills

• Internal audit standards, risk management and information systems governance and security.
• CAATs and report writing.
• Analytical, problem-solving and collaboration skills; able to work independently and in teams.

To apply, send an application letter and updated CV to the careers office by 13 November 2026, stating the position in the subject line; only shortlisted candidates will be contacted.