Systems Auditor

About the role

The Systems Auditor provides independent assurance and advisory on the adequacy, effectiveness and security of information systems, IT governance and technology controls across the Kenya Red Cross Society's commercial entities, including Boma Hotels, Eplus, Switch TV and Boma International Hospitality College. The role supports business continuity and operational efficiency by evaluating IT risks, cybersecurity, ERP controls and compliance with information systems policies and standards.

Key responsibilities

• Plan and execute financial, operational, compliance, investigative, IT and systems audits in line with approved audit plans and professional standards, recommending corrective actions.
• Evaluate governance, risk management, internal controls and IT controls, reviewing them to ensure the accuracy, integrity, security and availability of information.
• Review IT governance, cybersecurity, information security, business continuity, disaster recovery and change management controls, and ERP systems, application controls, user access and system configurations.
• Use data analytics and CAATs to identify anomalies, control weaknesses, fraud risks and unusual transactions.
• Assess compliance with policies, laws, regulations, contractual obligations, ICT requirements, software licensing and data protection standards; conduct fraud and investigative audits and report suspected irregularities.
• Prepare audit reports, follow up on recommendations and advise management on internal controls, risk management, cybersecurity and IT governance.
• Ensure adherence to financial policies and internal controls, support implementation of audit recommendations, monitor donor and statutory compliance, support asset verification and report financial and operational risks.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Computer Engineering or a related field.
• CISA (Certified Information Systems Auditor) is required; CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer or CPA(K) is an added advantage; membership in ISACA or another relevant body.
• Minimum of four years' experience in IT audit.
• Experience auditing ERP systems and business applications such as Sun Systems, Navision, Opera, Microsoft Dynamics or similar.
• Experience with data analytics, IT general controls (ITGCs), application controls and systems implementation reviews.

Required skills

• Strong knowledge of IT auditing standards, COBIT, ISO 27001, ITGCs, cybersecurity and risk management.
• Proficiency in audit data analytics and CAATs (ACL, IDEA, Power BI, SQL, Excel).
• Knowledge of cloud computing, network security, databases, ERP systems and data privacy regulations.
• Analytical, report writing and problem-solving skills, and strong communication and stakeholder management.