Assistant Manager, Information Systems Audit

I&M Bank Kenya Limited is a financial institution founded in 1974, operating in the Banking & Financial Services industry.

The Assistant Manager, Information Systems Audit, is responsible for ensuring independent oversight of IT governance, risk management, and control frameworks. This includes evaluating general and application controls, safeguarding data integrity, confidentiality, and availability, and maintaining robust system security. The role contributes to assessing risks in IS audit areas, formulating audit plans, and developing engagement tests. It also involves executing audit procedures to evaluate the effectiveness of controls, documenting audit evidence, and identifying control weaknesses. The manager will lead assigned IS audit engagements, monitor progress, and engage with clients to validate root causes and propose actionable management responses. Additionally, the role supports special audits and reviews the governance and control environment across IT development projects, DevOps practices, and software engineering workflows, including SDLC, CI/CD pipelines, environment management, and agile delivery models.

1. Contribute to risk assessment for target IS audit areas under the guidance of the Manager, IS Audit.
2. Develop engagement audit plans and documentation, ensuring alignment of objectives, scope, methodology, and IT risk considerations.
3. Create specific audit tests for engagements.
4. Conduct audit procedures in line with IS audit objectives to assess the design and operational effectiveness of controls.
5. Document comprehensive and accurate audit evidence and working papers to support conclusions and recommendations.
6. Identify and document control weaknesses and associated risks for audit reports, escalating issues as necessary.
7. Lead assigned IS audit engagements, ensuring timely execution and identifying process improvement opportunities.
8. Continuously evaluate audit objectives, test procedures, and risk coverage for comprehensive technology environment assessment.
9. Collaborate with audit clients to confirm root causes and ensure management actions are appropriate.
10. Provide support for special audits involving information systems as required.
11. Review governance, risk management, and control environments within IT development projects, DevOps, and software engineering workflows, including SDLC, CI/CD, environment management, and agile models.

1. Bachelor’s degree in Information Systems, Computer Science, IT, or a business-related field.
2. Certified Information Systems Auditor (CISA) is mandatory.
3. One additional certification from CISM, CRISC, CGEIT, CIA, ISO/IEC 27001 Lead Auditor/Implementer, CISSP, CIAQA, CCNA, CPA, CEH, or CHFI is an advantage.
4. Membership with the Information Systems Audit and Control Association (ISACA).
5. Over five years of experience in a similar role within a comparable organization.
6. High ethical standards and integrity.
7. Sound judgment for risk-based audit planning, scoping, and prioritization.
8. Strong commercial awareness to align audit outcomes with business objectives.
9. Comprehensive banking knowledge.
10. Extensive risk knowledge across IT and operational domains.
11. Experience in reviewing DevOps and IT engineering processes, including CI/CD pipelines and agile practices.