Information Systems Auditor

Role Overview

Reporting to the Head of Internal Audit, the Information Systems Auditor will be responsible for reviewing and evaluating the automated information processing systems, related non-automated processes and the interfaces between them. The primary objective is to ensure that comprehensive information system controls are in place and that all laid down information system policies and procedures are rigorously adhered to.

Key Responsibilities

• In charge of the Information System audit function within the Internal Audit Department.
• Develop and implement the annual Information Systems audit plan.
• Ensure that the Bank develops and maintains sound Information System policies and procedures that effectively minimize risks without compromising operational efficiency.
• Assess the risks inherent in the bank’s information systems and recommend necessary measures to mitigate these risks.
• Provide system investigation services whenever required by the institution.
• Evaluate the Bank’s compliance with internal information system policies, procedures, and operating instructions.
• Conduct regular and surprise inspection of all procedures, policies, and processes, ensuring they comply with all statutory requirements and industry best practice.
• Evaluate business continuity and disaster recovery processes, including back up procedures, business continuity and disaster recovery plans, tests, sites, and usability.
• Evaluate and report on system infrastructure and life cycle management.
• Review system development, acquisition, and maintenance processes.
• Ensure change management principles are consistently followed.
• Provide support to other assurance processes to ensure the overall audit opinion appropriately incorporates the risks identified in the underlying information systems.
• Monitor the implementation and operation of defined controls and recommendations on an ongoing basis.
• Assist the Risk department with technical expertise to ensure ICT risks are well managed.

Qualifications and Competencies

• Be a holder of a bachelor's degree in Computer Science or an IT related field.
• Should possess professional qualification in Certified Information Systems Auditor (CISA) and/or Certified Information Security Manager (CISM).
• Possession of other Cisco certifications such as CCNA and CCSP will be an added advantage.
• Should have thorough knowledge of current auditing techniques and experience of the entire audit process.
• Should possess advanced ACL skills and/or other audit skills.
• Should have a minimum of five years’ experience in information systems audit.
• Should have excellent analytical skills and great attention to detail.
• Should have strong communication and presentation skills.
• Should have broad knowledge of information systems and operations in view of the internal audit objectives.
• Should be able to work independently, meet deadlines, and obtain results.