Information System Auditor at Bank of Africa Kenya Limited

Key Responsibilities of the IT Auditor;

• Develop risk based IT audit programs, tests and checklists to assist in execution of IT audits for various systems in the Bank.
• Execute risk- based audits in line with the approved IT Audit Plan from engagement planning carrying out appropriate tests, documenting IT risk exposures and making recommendations for improvement.
• Review the IT Strategy for the Bank and offer assurance on its alignment to the Bank’s Strategy.
• Provide assurance on the effectiveness of the Bank’s IT governance, IT management structure, adequacy of processes to support management in decision making process.
• Provide assurance that the practice of acquisition, development, testing and implementation of information systems meet the Bank’s strategies and objectives.
• Provide assurance that the processes for maintenance of the Bank’s information systems is adequate and whether they meet the user’s needs, expectations and overall bank strategy.
• Review IT Policies, Procedures and Processes and controls for completeness and alignment to the generally accepted IS Standards, ISO 27001 and other best practices.
• Carry out value for money reviews by evaluating the business case for the prosed IT investments in information systems to determine whether they meet the business objectives.
• Evaluate risk management practices in the in order to determine whether IT related risks are adequately managed to avert loses to the Bank.
• Assist the Head of Internal Audit in preparing IT Audit reports for submission to Management and the Board Audit Committee.
• Present the key IT audit findings to Senior Management.
• Coordinate IT audits carried out by external auditors such as Group Inspection, Central Bank, and the Bank’s External Auditor.
• Assist Internal Auditors in developing scripts and data analytics to assist them in their audit work.
• Offer support in carrying out fraud investigations that involve technical system manipulation.
• Support Internal Auditors in optimizing use of Computer Assisted Audit Techniques (CAATS) such as
• Teammate, and data analytic tools such as ACL, IDEA where appropriate.
• Provide advisory on proposed IT developments such as acquisition of new systems and system upgrades to
• ensure that IT risks are properly identified and controls embedded to mitigate the risks.

Qualifications for the IT Auditor Job:

• Bachelor’s degree in information systems/Technology, computer science or related field from a recognized university. Master’s Degree will be an added advantage.
• Qualification in Certified Information Systems Auditor (CISA).
• Certifications in Certified Information Security Manager (CISM), Certified in Risk and Information Systems and
• Control, Certified Information’s Systems Security Professional (CRISC), Certified Public Accountant (CPA K) will be an added advantage.
• 4- 5 years’ experience in carrying out and managing IT audit projects in a financial institution.
• Proficiency in Data Analysis tools ACL, IDEA.
• Knowledge of other Audit tools such as Teammate will be an added advantage.
• Experience in carrying out audits in other areas such as Credit, Operations, Treasury, Finance within a Bank is desirable.
• In- depth understanding of Bank operating environment and interlink between IT systems and business operations.
• Must be a member of Information Security Audit and Control (ISACA).
• Possess technical knowledge in information systems (Particularly Networks, Databases, Operating systems and general computer applications).
• Having knowledge in Accounting and Audit fields will be an added advantage.
• Integrity
• Analytical Skills
• Innovative/ Creative
• Initiative
• Dynamic/Adaptable
• Negotiation Skills
• Continuous Professional Learning/Education