Information Systems Auditor at New Kenya Co-operative Creameries Limited

NKCC/HR.708/ISA/02/06/2021

Job Purpose

Reports to Chief Manager Internal Audit, Risk & Compliance, Information systems auditor will be responsible for undertaking reviews of the NKCC’s ICT infrastructure and provide assurance to management on the adequacy of the system controls.

Key Responsibilities

1. Conduct regular risk assessments in the NKCC’s Information System and recommend measures to mitigate them.
2. Develop annual Information Systems audit plan, programs, and schedules on priority basis.
3. Audit automated systems and information technology in all areas of the organization
4. Establish extend of compliance of automated systems and information technology and provide support to other assurance processes.
5. Review, test, and rate controls of system security from access to disaster recovery plan
6. Extract data from complex computer systems to facilitate audit compliance and substantive testing procedure by use of CAATS.
7. Identify suitable audit areas and approaches when the information systems strategy changes.
8. Prepare audit reports and carry out audit follow-ups on completed audits.

Person specifications

1. Eight (8) year’s relevant work experience in information systems audit with at least 4 years in a similar position in a comparable organization
2. Bachelor’s Degree in Information Systems/Computer Science/Computer Engineering/Commerce (finance /accounting) or any other related field
3. Master’s Degree in related field is an added advantage.
4. Full member of Certified Information Systems Auditor (CISA)/Certified Information Security Manager (CISM), Certified Public Accountant /ACCA qualification will be an added advantage.
5. Experience auditing an ERP environment.
6. Management Course lasting not less than four (4) weeks Cumulative.

Key Competencies and skills

1. Strong communication and reporting skills
2. Strong analytical and numerical skills
3. Strong organization skills
4. Mentoring, coaching and leadership skills.
5. Professionalism
6. Ethical and integrity
7. Interpersonal and negotiation skills
8. Ability to work under pressure, prioritize and multi-task.
9. Sufficient understanding of diverse information systems environment and architecture, software, computer operations and systems lifecycle
10. Knowledge and experience in the use of CAATS/auditing software is desirable.
11. Knowledge of information systems governance and security principles and practices.