Senior Internal Auditor Information Systems

KTNA is a leading organization deeply rooted in the Kenyan economy, committed to innovation and operational excellence. We leverage technology to drive our mission and are dedicated to maintaining the highest standards of governance and integrity across all our operations.

As a Senior Internal Auditor Information Systems at KTNA, you will play a critical role in safeguarding our digital assets and ensuring robust IT governance. This position involves planning, executing, and reporting on complex information systems audits, evaluating the effectiveness of IT controls, and identifying potential risks and vulnerabilities. You will work closely with various departments, providing expert insights and recommendations to enhance our technological infrastructure and operational resilience. This role is crucial for maintaining compliance with regulatory standards and internal policies, contributing directly to KTNA's strategic objectives and sustainable growth in the dynamic African business landscape.

1. Plan and execute comprehensive information systems audits, including IT general controls, application controls, and infrastructure reviews.
2. Evaluate the design and operating effectiveness of IT controls, identifying control weaknesses and potential risks.
3. Assess compliance with internal policies, industry best practices (e.g., COBIT, ITIL), and relevant regulatory requirements (e.g., local data protection laws).
4. Develop audit programs, working papers, and clear, concise audit reports detailing findings, risks, and actionable recommendations.
5. Follow up on the implementation of audit recommendations, ensuring timely and effective remediation of identified issues.
6. Provide expert advice and guidance on IT risk management, cybersecurity, and control enhancements to management and stakeholders.
7. Participate in special projects, investigations, and advisory engagements as required, offering IT audit expertise.
8. Stay abreast of emerging IT risks, technologies, and audit methodologies relevant to the Kenyan and global market.

1. Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or a related field.
2. Professional certification such as CISA (Certified Information Systems Auditor) is mandatory. CISM, CISSP, or CIA are a plus.
3. Minimum of 5 years of progressive experience in IT audit, information security, or risk management, preferably within a large organization or professional services firm.
4. Strong understanding of IT general controls, application controls, cybersecurity frameworks, and data privacy regulations.
5. Proven experience with audit methodologies, risk assessment techniques, and report writing.
6. Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex technical issues to non-technical stakeholders.
7. Familiarity with enterprise resource planning (ERP) systems (e.g., SAP, Oracle) and various operating systems and databases.