Information System Auditor

About the role

GA Insurance Limited's Internal Audit department is hiring an Information System Auditor who reports to the General Manager. The role provides independent assurance on the Group's information systems, making sure that risk management, governance processes and controls adequately safeguard them.

Key responsibilities

• Take part in developing, implementing and monitoring the annual information systems internal audit plan.
• Assess all business information systems to judge the adequacy, effectiveness and efficiency of controls supporting business processes.
• Evaluate controls for information systems and technology processes, including data protection, change management and cyber security.
• Run compliance assessments against frameworks such as NIST, ISO, PCI DSS and the Data Privacy & Protection Act.
• Communicate audit results and recommendations to management and business process owners.
• Work with the Technology Services and IT security teams to ensure effective controls.
• Update stakeholders on emerging security risks and threats, and advise on information security incidents.
• Review IT governance documents, strategies, policies, contracts and procedures.
• Support audit reports, Board Audit Committee files and internal audit services for GA Life, GA Uganda and GA Tanzania.

Required profile

• Bachelor's degree in accounting, finance, commerce, economics, IT or a related field.
• Minimum of 3 years of experience in motor claims - general insurance.
• Professional certification in information systems audit (CISA, CGEIT, CISM or CIA) is an added advantage.

Required skills

• Internal audit standards and practices, including audit procedures, risk management and information systems governance and security.
• CAATs and report writing.
• Analytical, problem-solving and collaboration skills, with integrity and the ability to work independently and in teams.

Candidates apply by sending their application letter and updated CV by 13 November 2026, indicating the position in the subject line; only shortlisted candidates will be contacted.