Information Systems Auditor

Gertrude's Children's Hospital is a leading healthcare institution in Kenya, specializing in providing comprehensive medical care and services specifically for children.

This role is crucial for ensuring the integrity and security of Gertrude's Children's Hospital's information systems. The auditor will offer independent assurance and advisory services across various critical areas, including IT governance, risk management, internal control frameworks, information security protocols, and regulatory compliance. A key aspect involves promoting the responsible and ethical use of technology, safeguarding sensitive patient, staff, and organizational data, and maintaining the continuity of clinical and business operations. The auditor will also work to optimize the utilization of digital systems and facilitate the responsible integration of emerging technologies such as Artificial Intelligence, automation, and data analytics within the hospital environment.

1. Provide independent assurance and advisory support for the hospital's information systems.
2. Address IT governance, risk management, internal controls, and information security.
3. Ensure compliance with relevant regulations.
4. Promote responsible use of technology within the organization.
5. Safeguard patient, staff, and organizational information.
6. Maintain the continuity of clinical and business operations.
7. Optimize the utilization of digital systems.
8. Facilitate the responsible adoption of emerging technologies like AI, automation, and data analytics.

1. Minimum of 3 years of relevant experience in Information Systems audit, IT risk management, compliance assurance, or related fields, with at least 1 year in a supervisory or management capacity, preferably in a hospital or regulated healthcare setting.
2. Working knowledge of Hospital/Health Information Systems, Electronic Medical Records, ERP systems, databases, networking, web application development, cloud technologies, and health data exchange standards (e.g., HL7/FHIR).
3. Strong understanding of COSO ERM, COBIT 2019, ISO/IEC 27001, ISO 27799, and applicable data protection and digital health regulatory requirements.
4. Advantageous: Working knowledge of AI governance, AI risk management, model validation, responsible use of generative AI, automation controls, and audit implications of AI-enabled healthcare, administrative, and reporting systems.
5. Advantageous: Experience using data analytics, CAATs, or audit management tools such as ACL/Galvanize, IDEA, TeamMate+, or similar platforms.
6. Bachelor's Degree.