Information Systems Auditor – Nairobi

About the role

The Information Systems Auditor will lead IT audit activities for Caritas MFB, focusing on cybersecurity controls, core banking systems and network infrastructure. The role ensures that the bank's IT environment complies with risk management policies and regulatory requirements.

Key responsibilities

• Provide guidance to business and IT management on IT risk, application and infrastructure security.
• Develop and maintain the IT Risk Assessment framework and conduct periodic IT audits of systems, applications, processes and digital channels.
• Perform pre- and post-implementation reviews of new system deployments and enhancements.
• Execute IT security audits (network, applications, data centre) and coordinate with business units and external security experts.
• Evaluate and test IT general controls, review change management, business continuity and disaster recovery policies.
• Design and implement data-analysis tools to improve audit efficiency and prepare detailed audit work papers and reports with actionable recommendations.
• Champion the implementation of the Data Protection Act and participate in annual risk-based audit planning.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance or a related field.
• Minimum three years of experience in IT Governance or IS audit, preferably within a financial institution.
• Professional certification such as CISA, CISM, CISSP or CIA; membership of ISACA is mandatory.
• Strong knowledge of internal auditing, internal controls, risk management and banking operational controls.

Required skills

• CISA, CISM, CISSP or CIA certification.
• Database management, software development and networking concepts.
• Understanding of information security standards and best practices for securing computer systems.
• Ability to develop and use audit data-analysis tools.