Supervisor - Information Security at Kenya Revenue Authority (KRA)

Grade: KRA ‘ 4’

Department: Internal Audit

Division: Information Systems

Section / Unit: Information Systems

Reports to: Assistant Manager -Information Security

Job Purpose:

The job holder is responsible for carrying out review of the Authority’s Information System security to ensure technology in place and system controls are adequate.

Key Responsibilities:

• Execute corporate Information System (IS) and related security audits designed to provide assessment of internal control processes and operational performance, in accordance with the Standards for the Professional Practice of Internal Audit as set forth by the IIA, and department standards.
• Assist in preparing detailed plans for performing individual audits including the identification of key risks and controls, determination of audit objectives, development of an appropriate audit program and make necessary recommends for staff and budget to complete the project
• Prepare audit work papers documenting the result of reviews of assigned activities and recommended management action.
• Review of internal controls and security of systems under development, new and off the shelf information systems.
• Review of internal controls on IT Business Continuity and Disaster Recovery Plans
• Prepare under minimal supervision draft audit findings on assessment of systems, processes and operations, and management’s planned corrective actions.
• Assist in development of the Departmental risk register with regard to performance of IS audits
• Carrying out ad hoc special assignments and investigations

Academic Qualifications:

• Bachelors degree in Finance, Accounting, Business, Mathematics, Information Technology
• Professional Qualifications / Membership to professional bodies:
• Certification as a Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA), Part II,
• Membership of ISACA or IIA

Work experience required:

• A minimum of one year operational IT audit experience in an environment that provides exposure to sophisticated information systems audit techniques, network security, technology infrastructure, software development, project management, or a related field
• Knowledge of Control Objectives for Information and Related Technology, Accepted Auditing Standards, Standards for the Professional Practice of Internal Auditing. Skills/ Competencies:
• Analytical skills
• Organisational skills
• Computer proficient
• High level of integrity.
• Ability to understand business processes and good awareness of functional relationships of Departments within the Authority.
• Ability to apply audit standards through practical application.
• Understanding and ability to apply risk and control concepts.
• Supervisory skills.
• Problem solving and analytical skills.
• Oral and written communication skills.
• Excellent relationship management skills.