Officer- IT Governance & Compliance at Equity Bank Kenya

Job Purpose Statement

Supports the Manager in executing IT Audit strategies to evaluate the effectiveness, security, and compliance of the organization’s IT systems and processes. The role also supports the Manager in closure of Audit Exception

Key Accountabilities

• Assist in the review and updating of IT Governance, Risk, and Compliance (GRC) policies, procedures, and standards, including areas like Change Management, Access Controls, and Cybersecurity.
• Support planning and execution of IT Audits and internal control self-assessments, focusing on assessing internal controls, risk management practices, and regulatory compliance.
• Collaborate with various teams to gather information, document audit findings, and follow up on implementation of recommended controls.
• Provide support to IT teams in implementing governance processes and addressing compliance requirements.
• Assist in the coordination of internal and external audit activities, ensuring proper documentation and timely follow-up on action items.
• Prepare draft reports summarizing audit findings, risks identified, and recommendations for improvements for management review.
• Support the liaison function between business and technology teams during IT and Information Security audit engagements.
• Report any identified control deficiencies promptly to management.
• Assist in tracking remediation efforts and verifying closure of audit findings.
• Support initiatives aimed at improving processes and alignment between Risk, Compliance, Internal Control, and Technology teams.
• Stay informed of relevant regulatory updates and guidelines impacting IT and Information Security.
• Manage the access control lifecycle ensuring that user access to systems and data is appropriately granted, monitoring and revoked based on the principle of least privilege
• Collaborate with various stakeholders to assess IAM risks, monitor compliance with access policies.

Qualifications, Experience

Knowledge & Skills

• Bachelor’s degree in information technology, Computer Science, or related field.
• Working towards relevant certifications (e.g., CISA, CRISC, CISM) preferred.
• 1-3 years of relevant experience or internship in Information Technology, with exposure to governance, audit, compliance, risk, or security activities.
• Understanding of basic IT controls and frameworks; experience in financial services is a plus.
• Familiarity with Agile methodologies such as Scrum/Kanban beneficial.

 Key Competencies & Skills

• Strong report writing, documentation, and organizational skills.
• Basic understanding of Legal, Risk, Compliance, and Cybersecurity concepts.
• Analytical thinking and problem-solving capabilities.
• Effective verbal and written communication skills.
• Ability to collaborate effectively within cross-functional teams.
• Proficient in MS Excel, MS Word, and MS PowerPoint.