Information Systems Auditor at University of Kabianga

UOK/ADM./3/10/23
Requirements

• Undergraduate degree in Computer Science or IT related field from a recognized university;
• Professional Qualifications in Certified Information Systems Audit (CISA) or Certified Information Systems Management (CISM) is desirable.
• Three (3) years’ experience in Information Systems audit within an internal audit function or external audit work experience specializing in Information Systems audit from a reputable institution.
• Possession of qualifications such as CIA, CPA or ACCA is an added advantage.
• Ability to apply professional and other skills acquired in an Enterprise Resource Planning environment.
• Good understanding of information systems controls and techniques for evaluating such controls, concept of risk and risk assessment.
• Sufficient understanding of diverse information systems environment and architecture, software, computer operations and systems lifecycle.
• Thorough understanding of business processes and of Network Security and controls for LAN/WAN.
• Detailed knowledge of information systems governance and security principles and practices.
• Ability to gather data, compile information and prepare reports;
• Demonstrate deep understanding of the internal audit process, controls, procedures and investigation techniques;
• Excellent communication, analytical, planning, organizational and interpersonal skills.

Duties and Responsibilities

• Conducting regular risk assessments in University’s Information System and recommend measures to mitigate them;
• Contribute to the development of the annual Information Systems audit plan, programmes and schedules on priority basis.
• Execute Information systems audit reviews based on the annual Information Systems Audit plan;
• Perform audits of information systems controls including data integrity, backup and disaster recovery, data Centre procedures, data communication and access controls, database administration and end user control;
• Conduct applications systems audits to determine the completeness and accuracy of transactions that have already been processed and the internal controls therein.
• Evaluate management action and controls needed to manage risks effectively, advise and where needed facilitate improvements;
• Monitor the implementation and operation of defined controls and recommendations on an ongoing basis;
• Ensure that the University’s information technology is in compliance with the University’s Policies and Procedures requirements;
• Assist in IT and other fraud investigations.
• Any other duty as may be assigned by immediate supervisor.