Reporting to the Head, Information Systems Audit, the Senior Manager, Information Systems Audit exists to lead Information System / Technology related audits and advisory assignments across the Group that will give objective and independent assurance that the bank’s Information Systems and ICT infrastructure are appropriate, well utilized, reliable and secure while giving commensurate recommendations on areas of improvement.

Key Responsibilities:

• Provide leadership in individual Information Systems/Technology-related audit and advisory assignments.
• Conduct Technology and Information Systems risk assessments to develop the annual Group IS audit plan.
• Lead the planning, execution, and reporting of IT Governance, IT General Controls (ITGC), and IT Application Controls reviews across the information systems and technology environment to provide assurance on the effectiveness and efficiency of the control environment, and compliance with KCB Group policies, international standards (ISO 27001, ISO 22301, PCI DSS, NIST 800 series, etc.), and regulatory requirements and guidelines.
• Undertake data analytics-based audit procedures as part of IT application reviews to test the completeness, accuracy, and validity of master and transactional data using Computer-Assisted Audit Techniques (CAATs) tools, and submit results to the Continuous Auditing team for subsequent automation.
• Perform ongoing project assurance and post-implementation reviews on technology-related projects.
• Prepare audit and advisory reports and present the results, recommendations, and conclusions of IS audit and advisory reviews to area management.
• Review audit work in accordance with Internal Audit guidelines and the Institute of Internal Auditors (IIA) Standards.
• Follow up and verify the closure of IS audit issue action plans as per stakeholder engagement agreements and track them to completion within agreed timelines.
• Share knowledge, skills, and experience with team members.
• Maintain respectful and effective communication and relationships with key stakeholders.

The Person

For the above position, the successful applicant should have the following:

• Bachelor’s degree in Information Technology, Electrical Engineering, Computer Science, Business Intelligence & Data Analytics, or a related field is required.
• Professional certifications such as CISA, CISM, or CISSP are required.
• A Master’s degree in Information Technology, MBA, Computer Science, or Business Intelligence & Data Analytics will be an added advantage.
• Minimum of 8 years of relevant work experience.
• At least 8 years of experience in IT Security and/or IT Audit is essential.
• At least 5 years of experience in IT Governance, IT Project Assurance, and Information Systems Audits is essential.
• At least 5 years of experience in data analytics, data extraction, data transformation, and scripting is essential.
• At least 5 years of experience in stakeholder management is essential.
• At least 2 years of people management experience is desirable.