Job purpose:
The Information Systems Auditor ISA is responsible for providing independent assurance on the governance, adequacy, effectiveness, and security of the Bank’s IT systems, infrastructure, and processes, ensuring compliance with CBK Prudential Guidelines, ISO standards, PCI-DSS, Bank policies and other relevant regulations.
The role will be responsible for reviewing information systems to determine whether they are functional, secure and safe throughout the Bank and are in compliance with privacy, customer trust and information security laws, and other regulations applicable to financial institutions.
Key responsibilities:
- Develop and execute risk-based IT audit plans.
- Review core banking systems, payment platforms and IT infrastructure controls.
- Conduct vulnerability assessments and penetration tests.
- Assess cybersecurity controls, access management and incident response.
- Evaluate IT governance, policies, and regulatory compliance.
- Evaluate vendor management processes, including IT service provider oversight, contract compliance, and SLA performance.
- Review the Bank’s Business Continuity Management BCM framework, including disaster recovery testing.
- Perform audits in accordance with Global Internal Audit Standards GIAS and ISACA guidelines.
- Prepare audit reports and follow up on issue remediation.
Job Experience/Qualifications
- Bachelor’s degree in IT, Computer Science, or related field.
- CISA certification mandatory; CISM, CEH, or ISO 27001 Lead Auditor an advantage.
- 5+ years’ experience in IS audit, risk, forensics and security preferably in banking.
Skills & Competencies
- Knowledge of IT general controls, cybersecurity, SDLC, vulnerability assessment, penetration testing and disaster recovery.
- Strong analytical and problem-solving skills.
- Excellent communication skills – be proficient in communicating across all levels of the organization as well as building good working relationships
- High integrity and independence.
