Information Security Auditor at Safaricom Sacco Ltd.

The position holder will report to the Audit Risk and Compliance Manager.

DUTIES AND RESPONSIBILITIES

• Conducting information systems audits end to end with the purpose of giving assurance and improvement of Information Technology operations within the Sacco.

• Performs general and application control reviews for simple to complex computer information systems.
• Performs information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
• Conduct internal forensic investigations and audit
• Directs and/or performs reviews of internal control procedures and security for systems under development and/or enhancements to current systems.
• Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
• Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
• Consults with and advises administrators, faculty, and staff on various operational issues related to computerized information systems, and on general business operations as needed.
• Follows up on audit findings to ensure that management has taken corrective action(s).
• Coordinates and interacts with external auditors, administrators, faculty, staff and law enforcement officials as appropriate; may be required to testify in court.
• Assists and trains other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.
• Conduct operational, compliance, financial and investigative audits, as assigned.

• Promote an environment founded on Safaricom SACCO values of Customer focus, Integrity, Reliability and Innovation.

QUALIFICATIONS:

• Bachelor’s degree in Computer Science or Business related field
• Certified Information Systems Auditor (CISA).
• Experience in Data Analytics with IDEA Data Analytics Tool for Auditing purposes.
• Certified Public Accountant (at least Part 2)/ACCA level II would be an added advantage.

EXPERIENCE:

Minimum of 5 years working experience 3 of which should be in a similar role.

 KEY COMPETENCES:

• Excellent understanding of auditing concepts and practices
• In-depth knowledge of information systems, ICT security, and related internal controls
• Very strong analytical and problem solving skills
• Strong communication and presentation skills
• Interpersonal skills
• Independence of mind with ability to defend position on significant issues
• Highly organized and detail oriented
• Results-oriented and self-driven