Assistant Manager, Information Systems Audit

About the role

The Assistant Manager/Information Systems Audit leads IT audit operations and risk evaluations at Kenya Post Office Savings Bank. The role examines, evaluates and verifies the Bank's information systems, technology processes, procedures, internal controls and data to give independent assurance on ICT governance, risk management and controls. It is a full-time position based in Nairobi.

Key responsibilities

• Plan, execute and lead information security audits covering the core banking system, digital and agency banking platforms, cybersecurity, data governance, technology projects, business continuity and disaster recovery, and third-party technology services.
• Ensure adequate internal controls and data protection, and assess the adequacy of ICT governance, technology risk management and internal controls.
• Inspect systems, applications, databases, networks, operating systems and infrastructure, and review controls over digital, mobile and agency banking channels.
• Evaluate compliance of IT operations with Bank policies, laws, regulations and professional standards, and review identity and access management, system development and change management, and third-party and cloud arrangements.
• Provide independent assurance over ICT and digital-transformation projects, and review data governance, backup and recovery, and incident management.
• Document audit procedures, use CAATs and data analytics, perform forensic investigations where needed, and make security recommendations.
• Report audit findings, monitor implementation of agreed actions and escalate overdue or inadequately addressed issues.

Required profile

• At least 12 years of relevant experience in the public or private sector, including 3 years in a supervisory position.
• Master's degree in Accounting, Finance, Business Administration, Information Technology, Information Systems, Computer Science, Cybersecurity or an equivalent recognised qualification.
• CISA, CISM or equivalent professional qualification, and membership of ISACA or an equivalent body in good standing.
• Completed a management course of at least four weeks, and met the requirements of Chapter Six of the Constitution of Kenya.

Required skills

• Demonstrated knowledge of information systems auditing and of core banking systems, digital financial services, application controls, databases, networks and technology infrastructure.
• Knowledge of banking, cybersecurity, data-protection and ICT regulatory requirements.
• Ability to apply CAATs, data analytics and technology-enabled audit tools.
• Strong analytical, problem-solving, communication and report-writing skills, and ability to supervise assignments and work with multidisciplinary teams.

Applications are made through the recruiting agency, Corporate Staffing Services.