Mount Kenya University (MKU) is seeking a qualified Deputy Director, Information Systems Audit to lead, design, and implement the University's information systems audit strategy and policies. Reporting to the Director, Internal and Systems Audit, the successful candidate will conduct comprehensive risk-based IT audits, evaluate logical controls, and ensure robust cyber security and operational governance across digital platforms.
Duties & Responsibilities
Audit Strategy & Planning: Develop and implement the University's information systems audit strategy. Prepare an annual risk-based Information Systems audit plan aligned with University strategies and objectives in consultation with the Director Internal Audit.
Policies & Procedures: Design, develop, and implement Information Systems audit policies and procedures consistent with the University's standards.
Risk Assessment & Audits: Conduct Information Systems audits and reviews to ensure information systems control and security risks, including Cyber Security risks, are clearly identified.
Controls & Systems Review: Perform reviews of Information Systems installations and services to determine the adequacy of logical controls, change control, backup and recovery procedures, and business continuity management.
Operational & Forensic Support: Support financial and operational audits on specific audit assignments involving advanced IT audit considerations. Support investigative and/or forensic audits.
External Coordination: Coordinate the University's information systems audits by external auditors and regulators.
General: Undertake any other duties as may be assigned from time to time.
Requirements & Qualifications
Education: Master's degree and Bachelor's degree in Computer Science, Business Information Technology, or a related field.
Certifications: CISA, CISM, or CISSP required. Professional accounting certifications such as CPA, ACCA, or CIA are an added advantage.
Experience: At least four (4) years of information systems audit experience gained in an audit environment.
Professional Membership: Must be registered with a relevant professional body.
Competencies & Key Skills
Data mining and analytics skills.
Working knowledge of Computer Assisted Audit Techniques (CAATs).
Working experience in Data Query Tools (e.g., SQL) is an added advantage.
Experience in auditing Enterprise Resource Planning (ERP) systems, digital platforms, and other subsystems.
.png){kind=logo}
