Senior Internal Auditor - Information Systems at Kenya Civil Aviation Authority

SENIOR INTERNAL AUDITOR - INFORMATION SYSTEMS - KCAA SCALE 6 – (REF: IAD/05/24) - 1 POST

Job Description

• Participation in the formulation, implementation, and monitoring of Internal Audit Strategic Plan and Annual Plans.
• Participating in the execution of multiple audit projects to achieve the scope, timing, and objectives of each assignment while ensuring applicable regulatory guidance is included in scope for assigned audits.
• Developing, documents, and updating audit procedures for audited departments in compliance with International Standards for the Professional Practice of Internal Auditing (Standards).
• Providing assurance to ensure that access to electronically stored and processed Authority information is adequately protected and managed.
• Testing adequacy and effectiveness of Information Systems control measures and recommend corrective action to be undertaken in areas of weakness.
• Developing and improving procedures to enable the Internal Audit function to optimize the use of Computer Assisted Audit tools such as TeamMate+, ACL, IDEA, etc.
• Liaising with audit clients to ensure prompt implementation of corrective actions on prior audit findings.
• Providing advisory services to Management for enhanced service delivery and controls on various KCAA processes.
• Identifying areas of risks, fraud, or malpractice and participating in special audits conducted by the Department.
• Training and coaching staff to develop skills, knowledge, and expertise necessary for effective execution of the department’s services.

Person Specifications

• At least four (4) years’ work experience as Information Systems Auditor I with hands-on experience in information system audits or information system operations in a comparable organization.
• Bachelor’s degree in information systems, Computer Science, or its equivalent from a recognized university.
• Master’s degree in information systems, Computer Science, or its equivalent from a recognized university will be an added advantage.
• Valid Professional Certification in Information Systems (IT) Audit, Risk, and Security e.g. CISM, CISA, CRISC.
• Membership to a Professional body in good standing.
• Knowledge of International Standards for the Professional Practice of Internal Auditing.
• Knowledge and demonstrable experience in the use of Audit Management Systems and Analytic tools.
• Demonstrable knowledge in IT risk assessment and controls reviews, concepts, or methodologies.
• Excellent written, verbal communication, presentation, and interpersonal skills.