Systems Auditor – IT Audit Specialist

About the role

The Systems Auditor provides independent assurance on the adequacy, effectiveness and security of information systems across Kenya Red Cross Society and its commercial entities. The role supports business continuity, operational efficiency and compliance with IT governance standards.

Key responsibilities

• Plan and execute financial, operational, compliance and IT audits in line with approved audit plans and professional standards.
• Evaluate governance, risk management and internal controls, identifying weaknesses and recommending corrective actions.
• Review IT governance, cybersecurity, business continuity, disaster recovery and change management controls.
• Assess ERP system configurations, user access, application controls and automated controls.
• Use data analytics and CAATs to detect anomalies, fraud risks and unusual transactions.
• Prepare audit reports, communicate findings and advise management on risk mitigation.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Information Systems or related field.
• Professional certification CISA required; additional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor or CPA(K) are an advantage.
• Minimum four years of experience in IT audit, including ERP system audits and data‑analytics driven reviews.
• Strong knowledge of IT audit standards (COBIT, ISO 27001), IT General Controls, cybersecurity and risk management.

Required skills

• Audit data‑analytics tools: ACL, IDEA, Power BI, SQL, Excel.
• Cloud computing, network security and database concepts.
• ERP systems experience (Sun Systems, Navision, Opera, Microsoft Dynamics).
• Frameworks and standards: COBIT, ISO 27001.