Assistant Manager, Information Systems Audit

About the role

I&M Bank is hiring a full-time Assistant Manager, Information Systems Audit in Nairobi. The roleholder provides independent assurance on the governance, risk management and control (GRC) processes related to information technology, covering general and application controls, data integrity, confidentiality, availability and system security.

Key responsibilities

• Conduct IT audits and risk assessments, including risk assessment of target audit areas within the IS space under the guidance of the Manager, IS Audit.
• Formulate engagement audit plans, prepare planning documents and align objectives, scope, methodology and IT risk considerations with the Manager, Information Systems Audit.
• Develop engagement audit tests and execute audit procedures to assess the design and operating effectiveness of controls.
• Document complete and accurate audit evidence and working papers, identify control weaknesses and escalate them to stakeholders.
• Lead assigned IS audit engagements, monitor progress against the approved plan and support special audits involving information systems.
• Review the GRC environment across IT development projects, DevOps practices, software engineering workflows, SDLC, CI/CD pipelines, environment management and agile delivery.
• Engage with audit clients to validate root causes and ensure management actions are appropriate and actionable.

Required profile

• Bachelor's degree in Information Systems, Computer Science, IT or a business-related field, or equivalent.
• Certified Information Systems Auditor (CISA) certification (required).
• Membership of the Information Systems Audit and Control Association (ISACA).
• Over five years of experience in a similar role in a similar-sized organization.
• Added advantage: CISM, CRISC, CGEIT, CIA, ISO/IEC 27001 Lead Auditor or Implementer, CISSP, CCNA, CEH, CHFI, CPA, CIAQA or other listed certifications.

Required skills

• High standards of ethics and integrity, sound judgment for risk-based audit planning and strong commercial awareness.
• Comprehensive risk knowledge across IT and operational domains.
• Experience reviewing DevOps and IT engineering processes, including CI/CD pipelines and agile practices.

The application is handled through the recruitment agency Corporate Staffing, which advertises the vacancy on behalf of I&M Bank.