Systems Internal Auditor at Catholic University of Eastern Africa

Job Qualifications
Minimum Requirements

• A Bachelor’s degree in Information Technology, Computer Science, Business Information Systems or its equivalent from a recognized university.
• At least 3 years expereince in IT Audit, Information Security, and Technology Risks.
• Knowledge of IT framework (COBIT, ITIL, ISO 27001, NIST) will be a plus.
• Professional certification such as Certified Systems Information Auditor (CISA) will be an added advantage.

Job Responsibilities

• Assess IT general controls (ITGCs), access controls, database and infrastructure security and other automated processes supporting financial reporting.
• Confirm that security measures adequately prevent, detect and mitigate vulnerabilities.
• Develop and execute risk-based IS Audit Plans and Programs.
• Ensure compliance with frameworks such as COBIT, ISO 27001, NIST and ITIL.
• Evaluate information security risks across applications, networks, databases, cloud platforms and outsourced IT services.
• Prepare detailed audit reports highlighting risks, control weaknesses and recommendations.
• Present findings to management and follow up on remediation of audit issues.
• Provide recommendations to strengthen IT governance, cybersecurity, emerging technology risks and regulatory compliance.