Job Description

SUMMARY

The role holder will assist the Chief Audit Executive, in collaboration with the Manager, Group Information system audit in providing independent assurance on the Bank’s information systems, specifically on integrity, confidentiality, availability of information as well as providing assurance on information system governance, risk management and controls in place.

PRIMARY RESPONSIBILITIES:

The Incumbent will report to the Chief Audit Executive and will be responsible for:

• Performing Information System audits across the bank as per the IS audit plan and in line with Internal Audit methodology, processes, procedures, and timeframes.


• Providing reports showing areas of governance, risk and control weakness and recommending corrective measures.


• Providing assurance that access to electronically stored corporate information is adequately protected and risks appropriately managed.


• Reviewing compliance with the information security policy and associated procedures.


• Reviewing IT documentation/procedures such as service level agreements, IT contracts, Disaster recovery plan/ Business continuity plan programs, ICT policy.


• Continuously reviewing information system parameters and logs to ensure compliance with the IS policy and best practice.


• Providing IS consultancy services for projects undertaken by the Bank during the year, ensuring compliance with best practice.


• Support audit teams in the audit of related systems/modules within functions being audited.


• Continuously developing and maintaining the skills, knowledge, and expertise to keep abreast of fast changing information systems threats to make valuable contributions in ensuring system security measures are in place for maximum protection of Bank Information assets.


• In liaison with the Manager, Group Information Systems Audit, give assurance on key ICT layers within the Bank.


• Support the audit team in employing data analytics in their day-to-day reviews.

PERSON SPECIFICATIONS

Academic Qualifications

• Bachelor’s degree in Computer Science, Information and Communication Technology or related field from a recognized institution.

Professional Qualifications

• Certified Information Systems Auditor (CISA) or equivalent mandatory, CISM/CIA/CFE/CEH an added advantage.; and


• Member of Information Systems Audit and Control Association (ISACA).

Experience

• At least 5 years’ relevant experience in Banking and Information Systems Audit.

Technical competencies

• Ability to write comprehensive reports and to perform complex reviews.


• Ability to employ different tools to conduct data analysis

Skills and Attributes

• Excellent communication and interpersonal skills.


• Excellent problem solving and decision-making skills; and

Generic Competencies

• Assertive with excellent people-management skills.


• Supervisory skills.