Information Systems Auditor

KEY RESPONSIBILITIES AND ACCOUNTABILITIES

Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.

Developing and maintaining the IT Risk Assessment framework

Conduct periodic IT audits and reviews of systems, applications, IT processes and digital channels.

Perform pre and post implementation reviews of new systems implementations or enhancements.

IT security audits (e.g., network, applications, and data center), including evaluating if security vulnerabilities are properly identified and mitigated. Coordinate the scope and performance of these reviews with business units and external security experts.

Evaluate and test IT general controls and provide value-based feedback.

Schedule and perform reviews on IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.

Develop, build & implement tools to analyze data to improve audit efficiency and effectiveness, Including for risk assessments.

Prepare and document all audit assignments on work papers.

Prepare audit reports with value adding recommendations for presentation to Management and Board Audit Committee.

Champion the implementation of data protection Act and policies.

Participate in annual risk-based audit planning.

To perform any other duty as assigned in line with the organization goals and objectives

Minimum Qualifications and Experience

Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related field.

A relevant professional qualification is an added advantage

Minimum 3 years’ experience in IT Governance/IS Audit in a reputable institution preferably a financial institution.

Recognized information systems certification a must (e.g. CISA, CISM, CISSP CIA)

Member of ISACA a MUST

ICPAK Membership will be an added advantage.

Skills Requirements:

Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.

Knowledge of internal auditing, internal controls, risk management, finance and accounting practices and methods.

Comprehensive understanding of internal control environment within the IT function.

An Understanding of database management, software development and networking

Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.

General understanding of operational controls in a banking environment