Background information about the job or company (e.g., role context, company overview)

Gertrude’s Children’s Hospital is a not-for-profit Children’s Hospital established in 1947. Gertrude’s Children’s Hospital is the most established paediatric hospital in Eastern and Central Africa, providing healthcare to children in Kenya as well as those referred from neighbouring countries. The hospital attends to over 300,000 outpatients annually through a network of 15 facilities in and around Nairobi and admits over 9,000 patients annually at its 100-bed facility located at Muthaiga, Nairobi.

Role Summary:

The Information Systems Auditor ensures independent assurance and advisory support for the Hospital’s information systems. This includes governance, risk management, internal controls, information security, compliance, and responsible technology use. The role safeguards patient, staff, and organizational information, maintains clinical and business operations, optimizes digital system usage, and promotes the responsible adoption of emerging technologies like AI, automation and data analytics.

Qualifications

A minimum of 3 years’ relevant experience in Information Systems audit, IT risk management, compliance assurance or related areas, at least 1 of which in a supervisory or management capacity, preferably within a hospital or other regulated healthcare environment.

Working knowledge of Hospital/Health Information Systems, Electronic Medical Records, ERP systems, databases, networking, web application development, cloud technologies and health data exchange standards such as HL7/FHIR.

Good understanding of COSO ERM, COBIT 2019, ISO/IEC 27001, ISO 27799 and applicable data protection and digital health regulatory requirements.

Working knowledge of AI governance, AI risk management, model validation, responsible use of generative AI, automation controls and the audit implications of AI-enabled healthcare, administrative and reporting systems will be an added advantage.

Experience using data analytics, CAATs or audit management tools such as ACL/Galvanize, IDEA, TeamMate+ or similar platforms will be an added advantage.

• Ensures independent assurance and advisory support for the Hospital’s information systems.
• Includes governance, risk management, internal controls, information security, compliance, and responsible technology use.
• Safeguards patient, staff, and organizational information.
• Maintains clinical and business operations.
• Optimizes digital system usage.
• Promotes the responsible adoption of emerging technologies like AI, automation and data analytics.

• Information Systems audit
• IT risk management
• Compliance assurance
• Hospital/Health Information Systems
• Electronic Medical Records
• ERP systems
• Databases
• Networking
• Web application development
• Cloud technologies
• Health data exchange standards (HL7/FHIR)
• COSO ERM
• COBIT 2019
• ISO/IEC 27001
• ISO 27799
• Data protection regulations
• Digital health regulations
• AI governance (added advantage)
• AI risk management (added advantage)
• Model validation (added advantage)
• Responsible use of generative AI (added advantage)
• Automation controls (added advantage)
• Data analytics (added advantage)
• CAATs (added advantage)
• Audit management tools (ACL/Galvanize, IDEA, TeamMate+ or similar) (added advantage)

• A minimum of 3 years’ relevant experience in Information Systems audit, IT risk management, compliance assurance or related areas.
• At least 1 year in a supervisory or management capacity.
• Preferably within a hospital or other regulated healthcare environment.
• Working knowledge of Hospital/Health Information Systems, Electronic Medical Records, ERP systems, databases, networking, web application development, cloud technologies and health data exchange standards such as HL7/FHIR.
• Good understanding of COSO ERM, COBIT 2019, ISO/IEC 27001, ISO 27799 and applicable data protection and digital health regulatory requirements.
• Working knowledge of AI governance, AI risk management, model validation, responsible use of generative AI, automation controls and the audit implications of AI-enabled healthcare, administrative and reporting systems will be an added advantage.
• Experience using data analytics, CAATs or audit management tools such as ACL/Galvanize, IDEA, TeamMate+ or similar platforms will be an added advantage.