GDC SACCO Society LTD is a regulated Tier 1 Savings and Credit Cooperative Society committed to providing exceptional financial services to our community. We are dedicated to empowering our members through affordable credit facilities, savings products, and financial education.

Key Responsibilities

The incumbent will report to the Internal Audit Manager and will be responsible for:

• Conducting end-to-end information systems audits and providing actionable recommendations.
• Evaluating general and application controls across IT systems.
• Reviewing IT processes including system security, data integrity, backup and effectiveness of IT Business Continuity Management.
• Identifying system vulnerabilities in the process of continuous audits and recommending control improvements.
• Performing preliminary IT-related forensic audit and investigations where necessary.
• Preparing audit reports and presenting findings to management.
• Following up and issuing assurance on IT audit recommendations to the status of implementation.
• Giving assurance on IT project implementation and innovations to ensure adherence to security and project implementation standards.
• Providing advice, insight and foresight support on IT risks and controls.
• Supporting operational, compliance and financial audits as assigned.
• Any other related duty as may be assigned.

Skills, Competencies & Experience

The successful candidate will be required to have the following skills and competencies:

• Bachelor’s degree in Information Systems or Computer Science from a recognized university. Possession of an MSc or other relevant postgraduate qualification will be an added advantage.
• Certified Information Systems Auditor (CISA) is a mandatory requirement.
• Professional certification in IT Audit, Risk and Security e.g. CISM, CISSP, CISA, CRISC.
• CPA (Part II) or ACCA (Level II) will be an added advantage.
• Knowledge of IT governance frameworks, cybersecurity, database auditing, data analytics and financial systems.
• Minimum of three (3) years’ experience in IT audit or a similar role.
• Demonstrable knowledge in risk assessment and control concepts/methodologies.
• Excellent oral and written skills.
• Excellent qualitative and quantitative analytical ability.
• Excellent attention to detail and organizational skills.

• Conducting end-to-end information systems audits and providing actionable recommendations.
• Evaluating general and application controls across IT systems.
• Reviewing IT processes including system security, data integrity, backup and effectiveness of IT Business Continuity Management.
• Identifying system vulnerabilities in the process of continuous audits and recommending control improvements.
• Performing preliminary IT-related forensic audit and investigations where necessary.
• Preparing audit reports and presenting findings to management.
• Following up and issuing assurance on IT audit recommendations to the status of implementation.
• Giving assurance on IT project implementation and innovations to ensure adherence to security and project implementation standards.
• Providing advice, insight and foresight support on IT risks and controls.
• Supporting operational, compliance and financial audits as assigned.
• Any other related duty as may be assigned.

• Certified Information Systems Auditor (CISA)
• Professional certification in IT Audit, Risk and Security e.g. CISM, CISSP, CISA, CRISC.
• Knowledge of IT governance frameworks, cybersecurity, database auditing, data analytics and financial systems.
• Demonstrable knowledge in risk assessment and control concepts/methodologies.
• Excellent oral and written skills.
• Excellent qualitative and quantitative analytical ability.
• Excellent attention to detail and organizational skills.

• Bachelor’s degree in Information Systems or Computer Science from a recognized university.
• Possession of an MSc or other relevant postgraduate qualification will be an added advantage.
• Certified Information Systems Auditor (CISA) is a mandatory requirement.
• Professional certification in IT Audit, Risk and Security e.g. CISM, CISSP, CISA, CRISC.
• CPA (Part II) or ACCA (Level II) will be an added advantage.