IT Job At Caritas MFB

Join Our Whatsapp Channel - CLICK HERE

IT Governance / IS Audit

Job Purpose

The successful candidate will oversee and support IT governance, risk, and information systems audit activities within the Bank. The role will provide assurance and advisory support on the security, controls, risk management, and effectiveness of IT systems, infrastructure, applications, processes, and digital channels.

Key Responsibilities and Accountabilities

• Advise Business and IT management on technology risk matters, with particular emphasis on application and infrastructure security.

• Develop, maintain, and continuously improve the IT Risk Assessment framework.

• Carry out periodic audits and reviews covering IT systems, applications, processes, infrastructure, and digital channels.

• Conduct reviews before and after the implementation or enhancement of new systems to assess whether appropriate controls have been incorporated.

• Undertake IT security audits covering areas such as networks, applications, and data centres, assessing whether security weaknesses have been identified and appropriately addressed.

• Coordinate the scope and execution of IT security reviews with relevant business units and external security specialists where required.

• Assess and test IT general controls and provide practical, value-focused recommendations based on the findings.

• Plan and conduct reviews of IT policies and procedures, including change management, business continuity and disaster recovery, and information security, to determine whether adequate controls are in place.

• Develop and implement data analysis tools that enhance the efficiency and effectiveness of audit work, including tools used for risk assessment activities.

• Maintain complete and well-organized audit working papers for all assignments undertaken.

• Prepare audit reports containing practical, value-adding recommendations for submission to Management and the Board Audit Committee.

• Champion compliance and implementation of the Data Protection Act and related organizational policies.

• Contribute to the preparation of the annual risk-based audit plan.

• Perform any other duties assigned in support of the Bank’s goals and objectives.

Minimum Qualifications and Experience

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related discipline.

• A relevant professional qualification is an added advantage.

• At least 3 years of experience in IT Governance or Information Systems Audit within a reputable organization, preferably a financial institution.

• A recognized information systems certification is required, such as CISA, CISM, CISSP, or CIA.

• Membership of ISACA is mandatory.

• ICPAK membership will be an added advantage.

Skills and Competencies

• Excellent interpersonal and communication abilities, with the capacity to explain technical matters effectively to both technical and non-technical audiences.

• Sound knowledge of internal audit, internal controls, risk management, and finance and accounting principles and practices.

• Strong understanding of the internal control environment applicable to IT functions.

• Knowledge of database administration, software development, and computer networking.

• Understanding of information security standards, recognized practices for protecting computer systems, and relevant laws and regulatory requirements.

• General knowledge of operational controls within the banking sector.

Application

Interested candidates who meet the criteria above are encouraged to send their application letters and detailed CVs to: Email: recruitment@caritas-mfb.co.ke. Kindly indicate the position title on the subject line when applying Closing date for application: 23rd September 2026.