Information Systems Auditor at New Kenya Co-operative Creameries Limited

INFORMATION SYSTEMS AUDITOR: NKCC/HR.614/ISA/20/05/2024

Job Purpose

Reports to Chief Manager Internal Audit, Risk & Compliance, Information Systems Auditor will be responsible for undertaking reviews of the NKNC’s ICT infrastructure and providing assurance to management on the adequacy of the system’s controls.

Key Responsibilities

•  Conduct regular risk assessments in the NKCC’s Information System and recommend measures to mitigate them.
•  Develop an annual information systems audit plan, programmes, and schedules on a priority basis.
•  Audit automated systems and information technology in all areas of the organisation.
•  Establish the extent of compliance with automated systems and information technology, and provide support for other assurance processes.
•  Review, test, and rate controls of system security from access to the disaster recovery plan
•  Extract data from complex computer systems to facilitate audit compliance and substantive testing procedures by using CAATS.
•  Identify suitable audit areas and approaches when the information systems strategy changes.
•  Prepare audit reports and carry out audit follow-ups on completed audits.

Person specifications

•  Eight (8) year’s relevant work experience in information systems audit with at least 4 years in a similar position in a comparable organisation.
•  Bachelor’s degree in Information Systems/Computer Science/Computer Engineering/Commerce (finance/accounting) or any other related field.
•  A Master’s degree in a related field is an added advantage.
•  A full member of the Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or Certified Public Accountant /ACCA qualification will be an added advantage.
•  Experience auditing an ERP environment.

Key Competencies and skills

•  Strong communication and reporting skills
•  Strong analytical and numerical skills
•  Strong organization skills
•  Leadership skills (including mentoring and coaching)
•  Professionalism
•  Ethical and integrity
•  Interpersonal and negotiation skills
•  Ability to work under pressure, prioritize, and multi-task
•  Understanding of diverse information systems environment and architecture, software, computer operations and systems lifecycle.
•  Knowledge of information systems governance and security principles
•  Knowledge and experience in CAATS/auditing software (desirable)