Information Systems Auditor

Caritas Microfinance Bank is a licensed microfinance bank regulated by the Central Bank of Kenya. It provides innovative and customized financial services, primarily targeting the unbanked and underbanked, with its headquarters in Nairobi CBD.

The Information Systems Auditor will be responsible for overseeing the bank's network infrastructure, including both local and wide area networks. This involves providing essential and timely support to the business for all network, communication, and associated infrastructure and services, ensuring operational efficiency and security.

1. Advise Business and IT management on IT risk management, especially regarding application and infrastructure security.
2. Develop and maintain the IT Risk Assessment framework.
3. Conduct regular IT audits and reviews of systems, applications, IT processes, and digital channels.
4. Perform pre- and post-implementation reviews for new system deployments or enhancements.
5. Execute IT security audits (e.g., network, applications, data center) and assess the identification and mitigation of security vulnerabilities, coordinating these reviews with business units and external security experts.
6. Evaluate and test IT general controls, providing valuable feedback.
7. Schedule and conduct reviews of IT management policies and procedures, such as change management, business continuity planning/disaster recovery, and information security, to ensure adequate controls.
8. Develop, build, and implement tools for data analysis to enhance audit efficiency and effectiveness, including for risk assessments.
9. Prepare and document all audit assignments in work papers.
10. Compile audit reports with value-adding recommendations for presentation to Management and the Board Audit Committee.
11. Lead the implementation of data protection acts and policies.
12. Participate in annual risk-based audit planning.
13. Perform other assigned duties aligned with organizational goals.

1. Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related field.
2. A relevant professional qualification is an advantage.
3. Minimum of 3 years of experience in IT Governance/IS Audit, preferably within a financial institution.
4. Recognized information systems certification (e.g., CISA, CISM, CISSP, CIA) is mandatory.
5. Membership with ISACA is mandatory.
6. ICPAK Membership is an added advantage.
7. Outstanding interpersonal and communication skills, capable of effective communication with both technical and non-technical audiences.
8. Knowledge of internal auditing, internal controls, risk management, finance, and accounting practices and methods.
9. Comprehensive understanding of the internal control environment within the IT function.
10. Understanding of database management, software development, and networking.
11. Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.
12. General understanding of operational controls in a banking environment.