Information Systems Auditor at The Nairobi Hospital

REF: TNH/HHR/ISA/05/2023

The overall purpose of this role is to independently and objectively provide assurance regarding the hospital’s information system confidentiality, integrity, and availability.

ROLES AND RESPONSIBILITIES

• Report in the line of duty to the Internal Audit Manager.
• Participate in the preparation of the annual audit plan in line with key risk areas and strategic priorities of the hospital.
• Review ICT polices and procedure and work instructions for adequacy.
• Evaluate systems processes to determine efficiency, completeness and accuracy.
• Assess entire ICT environment from application systems and business protocols to determine whether business objectives are being attained in a secure environment.
• Review Hospital’s hardware and software to ensure acquisition and deployment and disposal process are in line with best practice.
• Provide assurance on security for the entire ICT environment within the Hospital including infrastructure.
• Review information system application servers, backups, IT infrastructure, network to ensure compliance to policy and best practice.
• Monitor and report on utility of computer facilities within the hospital for continuous checks and develop report on findings.
• Test computer general controls within the Hospital to ensure confidentiality and access management are well managed.
• Carry out routine and special audit assignments as requested from time to time and develop report on findings and recommendations that inform on action points.
• Prepare audit reports for review and subsequent presentation to senior management and the Board of Management.
• Conduct integrated audit in collaboration with the operational auditors to provide assurance of the internal environment taking into account the ICT aspect.
• Carry out audit follow ups for assignments carried on a quarterly basis based on audit reports recommendations and develop reports on implementation status and verify.
• Keep abreast on latest technology and trends to provide input to mitigate emerging threats to the Hospital; and
• Any other responsibilities that may be assigned to the job holder by the supervisor from time to time.

EDUCATION AND EXPERIENCE

• Bachelor's degree in information systems, Computer Science, Information Technology or any other ICT related field from a recognized Institution.
• Certified Information Systems Auditor (CISA).
• Certified Internal Auditor (CIA)
• Certified Fraud Examiner (CFE)
• Must be up to date with ISACA.
• Member in good standing of ISACA/IIA/ACFE
• Minimum of 5 years relevant experience.