Information System Auditor

GA Insurance Limited is an established insurance provider operating in Kenya, Uganda, and Tanzania, offering a range of insurance products and services.

The Information System Auditor at GA Insurance Limited is tasked with independently assuring the integrity and security of the company's information systems. This involves evaluating and ensuring the adequacy of risk management, governance processes, and control mechanisms to protect the company's information assets at all times.

1. Contribute to the creation, execution, and oversight of the yearly information systems internal audit plan.
2. Assess all business information systems to determine the sufficiency, effectiveness, and efficiency of controls in supporting business operations.
3. Evaluate the effectiveness and adequacy of controls within information systems and technology processes, covering areas like data protection, change management, and cybersecurity.
4. Conduct compliance assessments of information systems processes against established industry frameworks, regulations, and standards, including NIST, ISO, PCI DSS, and the Data Privacy & Protection Act.
5. Present audit findings and recommendations to relevant stakeholders, such as management and business process owners.
6. Work with Technology Services and IT security teams to ensure the proper implementation and effective functioning of controls.
7. Stay informed about evolving changes, security risks, and threats in the information systems environment, offering timely and relevant advice to stakeholders.
8. Review IT governance documentation, including strategies, policies, contracts, and procedural guidelines.
9. Offer guidance and support in resolving information security incidents.
10. Contribute to maintaining high-quality work output, ensuring adherence to working paper standards and supporting the implementation of audit recommendations and conclusions.
11. Assist in preparing comprehensive audit reports that highlight significant control weaknesses and instances of non-compliance with procedures, policies, and regulatory requirements.
12. Aid in the preparation of materials for the Board Audit Committee.
13. Deliver internal audit services to GA Insurance subsidiaries, including GA Life, GA Uganda, and GA Tanzania.

1. Bachelor’s degree in Accounting, Finance, Commerce, Economics, IT, or a related discipline.
2. Professional certification in information systems audit (e.g., CISA, CGEIT, CISM, or CIA) is an advantageous qualification.
3. Minimum of 3 years of experience in motor claims within general insurance.
4. Solid understanding of internal audit standards and practices, encompassing audit procedures, risk management, information systems governance and security, CAATs, project management, and report writing.
5. Ability to evaluate business processes and technology environments.
6. Results-driven and detail-oriented professional with strong analytical, problem-solving, customer service, and collaboration skills.
7. Demonstrated integrity, emotional intelligence, and agility in managing competing priorities.
8. Capability to work effectively both independently and as part of a team.