Systems Auditor

About the role

The Kenya Red Cross Society is seeking a Systems Auditor to provide independent assurance on the adequacy, effectiveness and security of its information systems across multiple commercial entities. Based in Nairobi, the role will support business continuity, operational efficiency and compliance by evaluating IT risks, cybersecurity controls and ERP processes.

Key responsibilities

• Plan and execute financial, operational, compliance, investigative and IT audits in line with approved audit plans and professional standards.
• Identify control gaps, operational inefficiencies and process‑improvement opportunities, and recommend corrective actions.
• Assess IT governance, cybersecurity, business continuity, disaster‑recovery and change‑management controls.
• Review ERP system configurations, user access, application controls and automated controls.
• Use data analytics and computer‑assisted audit techniques (CAATs) to detect anomalies, fraud risks and unusual transactions.
• Prepare audit reports, communicate findings and follow up on implementation of recommendations.
• Advise management on internal controls, risk management, cybersecurity and emerging technology risks.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Computer Engineering or a related field.
• Professional certification CISA is mandatory; additional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer are advantageous.
• Membership in ISACA or a comparable professional body.
• Relevant experience conducting IT and systems audits, preferably within a large organization or multi‑entity environment.

Required skills

• CISA certification.
• Knowledge of cybersecurity frameworks and IT governance.
• Experience with ERP audit controls and user‑access reviews.
• Proficiency in data‑analytics techniques and CAATs.
• Familiarity with ISO 27001 standards and related audit methodologies.