Manager, Fintech and Cyber Audit

About the role

The Manager, Fintech and Cyber Audit provides independent, risk‑based assurance over Safaricom’s technology governance, digital financial ecosystem and IT controls. Reporting to Internal Audit Senior Managers, the role safeguards critical technology assets while enabling secure innovation.

Key responsibilities

• Plan and execute risk‑based vulnerability assessments and penetration tests across financial services technology, including web, mobile, API, network, cloud and infrastructure components.
• Evaluate the effectiveness of technology governance, risk management, cyber resilience, architecture, operational resilience and regulatory compliance (e.g., ISO/IEC 27001).
• Develop and monitor audit plans, track management actions and report emerging technology risks.
• Provide advisory support for digital transformation, cloud adoption, AI, automation and other technology innovations.
• Collaborate with Technology, Digital Engineering, Enterprise Architecture, M‑PESA Technology, Data and Business Leadership teams to deliver forward‑looking insights.

Required profile

• Strong background in internal audit, technology risk or cyber security within a financial services or telecom environment.
• Proven experience leading vulnerability assessments and penetration testing programmes.
• Deep understanding of IT general controls, data governance and regulatory standards.
• Ability to communicate findings to senior stakeholders and drive remediation.

Required skills

• Vulnerability assessment
• Penetration testing
• Web application security testing
• Mobile application security testing
• API security testing
• Network security testing
• Cloud security assessment
• ISO/IEC 27001 compliance