Information Systems Auditor

Caritas MFB is a Microfinance Bank dedicated to providing financial services and solutions.

The Information Systems Auditor will oversee all aspects of the bank's local and wide area networks, providing essential support to the business for communication, network infrastructure, and related services. The position involves ensuring the security, efficiency, and reliability of the bank's IT environment, including conducting audits, managing risks, and implementing data protection policies.

1. Provide guidance to business and IT management on IT risk management, particularly concerning application and infrastructure security.
2. Develop and maintain the IT Risk Assessment framework.
3. Conduct periodic IT audits and reviews of systems, applications, IT processes, and digital channels.
4. Perform pre and post-implementation reviews for new system deployments or enhancements.
5. Execute IT security audits, including network, applications, and data center security, and evaluate the identification and mitigation of security vulnerabilities.
6. Coordinate the scope and performance of security reviews with business units and external security experts.
7. Evaluate and test IT general controls, providing value-based feedback.
8. Schedule and perform reviews on IT management policies and procedures such as change management, business continuity planning/disaster recovery, and information security to ensure adequate controls.
9. Develop, build, and implement tools to analyze data to improve audit efficiency and effectiveness, including for risk assessments.
10. Prepare and document all audit assignments on work papers.
11. Draft audit reports with value-adding recommendations for presentation to Management and the Board Audit Committee.
12. Champion the implementation of data protection acts and policies.
13. Participate in annual risk-based audit planning.
14. Perform any other duties as assigned in line with organizational goals and objectives.

1. Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related field.
2. A relevant professional qualification is an added advantage.
3. Minimum of 3 years’ experience in IT Governance or IS Audit, preferably within a financial institution.
4. Recognized information systems certification is mandatory (e.g., CISA, CISM, CISSP, CIA).
5. Membership with ISACA is mandatory.
6. ICPAK Membership will be an added advantage.
7. Outstanding interpersonal and communication skills, with the ability to communicate effectively with technical and non-technical audiences.
8. Knowledge of internal auditing, internal controls, risk management, finance, and accounting practices and methods.
9. Comprehensive understanding of the internal control environment within the IT function.
10. An understanding of database management, software development, and networking.
11. Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.
12. General understanding of operational controls in a banking environment.