Prime Bank Ltd is one of the leading private banks in Kenya and was founded in 1992. Serving its customers for over 30 years, with a network of 23 branches, Prime Bank has the expertise to deliver flexible, efficient and personalized services.

Read more about this company

Job purpose:

The Information Systems Auditor (ISA) is responsible for providing independent assurance on the governance, adequacy, effectiveness, and security of the Bank’s IT systems, infrastructure, and processes, ensuring compliance with CBK Prudential Guidelines, ISO standards, PCI-DSS, Bank policies and other relevant regulations.

The role will be responsible for reviewing information systems to determine whether they are functional, secure and safe throughout the Bank and are in compliance with privacy, customer trust and information security laws, and other regulations applicable to financial institutions.

Key responsibilities:

Job Experience/Qualifications

Bachelor’s degree in IT, Computer Science, or related field.

CISA certification (mandatory); CISM, CEH, or ISO 27001 Lead Auditor an advantage.

5+ years’ experience in IS audit, risk, forensics and security preferably in banking.

Skills & Competencies

Knowledge of IT general controls, cybersecurity, SDLC, vulnerability assessment, penetration testing and disaster recovery.

Strong analytical and problem-solving skills.

Excellent communication skills – be proficient in communicating across all levels of the organization as well as building good working relationships

High integrity and independence.

Discover more

• Develop and execute risk-based IT audit plans.
• Review core banking systems, payment platforms and IT infrastructure controls.
• Conduct vulnerability assessments and penetration tests.
• Assess cybersecurity controls, access management and incident response.
• Evaluate IT governance, policies, and regulatory compliance.
• Evaluate vendor management processes, including IT service provider oversight, contract compliance, and SLA performance.
• Review the Bank’s Business Continuity Management (BCM) framework, including disaster recovery testing.
• Perform audits in accordance with Global Internal Audit Standards (GIAS) and ISACA guidelines.
• Prepare audit reports and follow up on issue remediation.

• Knowledge of IT general controls, cybersecurity, SDLC, vulnerability assessment, penetration testing and disaster recovery.
• Strong analytical and problem-solving skills.
• Excellent communication skills – be proficient in communicating across all levels of the organization as well as building good working relationships
• High integrity and independence.

• Bachelor’s degree in IT, Computer Science, or related field.
• CISA certification (mandatory); CISM, CEH, or ISO 27001 Lead Auditor an advantage.