IT Jobs At Kenya Red Cross Society

Join Our Whatsapp Channel - CLICK HERE

Systems Auditor

Overall Purpose

The Systems Auditor provides independent assurance and advisory services on the effectiveness, adequacy and security of information systems, IT governance frameworks and technology controls across Kenya Red Cross Society (KRCS) commercial entities, including Boma Hotels, Eplus, Switch TV and Boma International Hospitality College (BIHC).

The role helps strengthen business continuity and operational efficiency by assessing IT risks, cybersecurity controls, ERP systems and compliance with information systems policies and standards.

Key Responsibilities

Audit Planning and Execution

• Carry out financial, operational, compliance, investigative, IT and systems audits in accordance with approved audit plans and professional standards.

• Identify process inefficiencies, control weaknesses and opportunities for improvement, and recommend appropriate corrective measures.

Governance, Risk and Internal Controls

• Assess governance structures, risk management practices, internal controls and IT controls to identify weaknesses and areas requiring improvement.

• Evaluate controls that safeguard the accuracy, integrity, availability and security of organizational information.

IT and Systems Audit

• Examine IT governance, cybersecurity, information security, business continuity, disaster recovery and change management controls.

• Assess ERP systems, application controls, user access, system configurations and automated controls.

• Review IT projects, system implementations, upgrades and integrations to confirm that appropriate controls have been incorporated.

• Apply data analytics and Computer-Assisted Audit Techniques (CAATs) to identify anomalies, control weaknesses, potential fraud risks and unusual transactions.

Compliance and Investigations

• Evaluate compliance with organizational policies, applicable laws and regulations, contractual requirements, ICT standards, software licensing requirements and data protection standards.

• Conduct fraud-related and investigative audits and report suspected irregularities, non-compliance or policy violations.

Reporting, Follow-Up and Advisory

• Prepare audit reports, communicate audit findings and monitor the implementation of agreed recommendations.

• Provide management with advice on internal controls, risk management, cybersecurity, IT governance and emerging technology-related risks.

Person Specifications

Academic Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Computer Engineering or a related discipline.

Professional Qualifications

• CISA (Certified Information Systems Auditor) is required.

• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer or CPA(K) are an added advantage.

• Membership in ISACA or another relevant professional body is required.

Experience

• At least four years of professional experience in IT audit.

• Experience auditing ERP systems and business applications such as Sun Systems, Navision, Opera, Microsoft Dynamics or comparable platforms.

• Experience in data analytics, IT General Controls (ITGCs), application controls and reviews of systems implementations.

Competencies, Skills and Knowledge

• Strong understanding of IT auditing standards, COBIT, ISO 27001, IT General Controls (ITGCs), cybersecurity and risk management.

• Proficiency in audit data analytics and CAATs, including tools such as ACL, IDEA, Power BI, SQL and Excel.

• Knowledge of cloud computing, network security, databases, ERP platforms and data privacy regulations.

• Strong analytical, report-writing and problem-solving abilities.

• Excellent communication and stakeholder management skills.

• High levels of integrity and professionalism, with the ability to handle confidential information appropriately.

• Ability to manage multiple audit assignments and work effectively with different business units.

Compliance and Risk Management

• Ensure financial policies, procedures and internal controls are followed.

• Support the implementation and monitoring of audit recommendations.

• Monitor compliance with donor and statutory requirements.

• Participate in periodic asset verification exercises.

• Identify and report financial and operational risks.

Application

CLICK HERE