Background

Caritas Microfinance Bank is a licensed microfinance bank regulated by Central Bank of Kenya. Caritas MFB offers a full range of innovative and customized financial services with a special focus on the unbanked and underbanked. Its headquarters are located in the Nairobi CBD. Caritas MFB was formed to provide affordable, innovative and customized financia...

Job Purpose

The holder is responsible for all local area and wide area network within the Bank. The holder will ensure adequate and timely support for the business with respect to networks, communication and associated infrastructure and services.

KEY RESPONSIBILITIES AND ACCOUNTABILITIES

• Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.
• Developing and maintaining the IT Risk Assessment framework
• Conduct periodic IT audits and reviews of systems, applications, IT processes and digital channels.
• Perform pre and post implementation reviews of new systems implementations or enhancements.
• IT security audits (e.g., network, applications, and data center), including evaluating if security vulnerabilities are properly identified and mitigated. Coordinate the scope and performance of these reviews with business units and external security experts.
• Evaluate and test IT general controls and provide value-based feedback.
• Schedule and perform reviews on IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.
• Develop, build & implement tools to analyze data to improve audit efficiency and effectiveness, Including for risk assessments.
• Prepare and document all audit assignments on work papers.
• Prepare audit reports with value adding recommendations for presentation to Management and Board Audit Committee.
• Champion the implementation of data protection Act and policies.
• Participate in annual risk-based audit planning.
• To perform any other duty as assigned in line with the organization goals and objectives

Minimum Qualifications and Experience

• Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related field.
• A relevant professional qualification is an added advantage
• Minimum 3 years’ experience in IT Governance/IS Audit in a reputable institution preferably a financial institution.
• Recognized information systems certification a must (e.g. CISA, CISM, CISSP CIA)
• Member of ISACA a MUST
• ICPAK Membership will be an added advantage.

Skills Requirements:

• Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.
• Knowledge of internal auditing, internal controls, risk management, finance and accounting practices and methods.
• Comprehensive understanding of internal control environment within the IT function.
• An Understanding of database management, software development and networking
• Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.
• General understanding of operational controls in a banking environment

• Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.
• Developing and maintaining the IT Risk Assessment framework
• Conduct periodic IT audits and reviews of systems, applications, IT processes and digital channels.
• Perform pre and post implementation reviews of new systems implementations or enhancements.
• IT security audits (e.g., network, applications, and data center), including evaluating if security vulnerabilities are properly identified and mitigated. Coordinate the scope and performance of these reviews with business units and external security experts.
• Evaluate and test IT general controls and provide value-based feedback.
• Schedule and perform reviews on IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.
• Develop, build & implement tools to analyze data to improve audit efficiency and effectiveness, Including for risk assessments.
• Prepare and document all audit assignments on work papers.
• Prepare audit reports with value adding recommendations for presentation to Management and Board Audit Committee.
• Champion the implementation of data protection Act and policies.
• Participate in annual risk-based audit planning.
• To perform any other duty as assigned in line with the organization goals and objectives

• Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.
• Knowledge of internal auditing, internal controls, risk management, finance and accounting practices and methods.
• Comprehensive understanding of internal control environment within the IT function.
• An Understanding of database management, software development and networking
• Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.
• General understanding of operational controls in a banking environment

• Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related field.
• A relevant professional qualification is an added advantage
• Minimum 3 years’ experience in IT Governance/IS Audit in a reputable institution preferably a financial institution.
• Recognized information systems certification a must (e.g. CISA, CISM, CISSP CIA)
• Member of ISACA a MUST
• ICPAK Membership will be an added advantage.