Overview

Application

We are looking for an Internal Audit Senior to join our Legal group as we scale up and drive digital and financial inclusion across our markets.

Job Purpose

You will lead individual internal audit engagements end-to-end across M-KOPA's operating markets (Kenya, Uganda, Nigeria, Ghana, and South Africa), reporting to the Head of Internal Audit & Risk. This is an execution and delivery role: you own audits from planning through to reporting and follow-up, contribute directly to the annual audit plan, and present findings to management with the judgement and rigour expected of a seasoned, hands-on auditor.

Key Job Functions

Audit Execution

• Lead assigned audits from start to finish — planning and scoping, fieldwork/testing, documentation, reporting, and follow-up — in line with IIA standards and internal methodology.
• Independently manage engagement timelines, evidence quality, and working paper standards without close supervision.
• Identify root causes (not just symptoms), assess risk impact accurately, and develop practical, actionable recommendations.
• Apply data analytics and audit management tooling to strengthen coverage and efficiency across engagements.

Reporting & Stakeholder Management

• Present audit findings directly to process owners and management, defending conclusions and negotiating realistic, risk-appropriate remediation actions.
• Prepare clear, well-evidenced audit reports for review by the Head of Internal Audit & Risk.
• Build credible working relationships with process owners and country teams to enable efficient fieldwork and honest engagement.

Audit Planning

• Contribute to the development of the annual risk-based audit plan, including scoping proposed engagements and estimating resourcing.
• Flag emerging risks identified during fieldwork for inclusion in future audit cycles or escalation to the Head of Internal Audit & Risk.

Follow-Up & Continuous Improvement

• Track closure of agreed management actions, escalating overdue or inadequately remediated items.
• Support development of audit methodology, templates, and standards as the function matures.
• Mentor and provide on-the-job guidance to junior audit team members where applicable.

Organisation Structure

Reports to Head of Internal Audit & Risk

Experience, Skills & Qualifications

Education

• Degree in a business-related field, IT, Business Information Systems, or a related technical/business field from a recognised university.
• Professional certification required: one of Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), or ACCA (or equivalent, e.g. CPA).
• Additional certifications (e.g. CISM) are an added advantage.

Experience

• Minimum of 7+ years' audit experience, including prior experience at a Big Four (or equivalent top-tier external audit) firm — this is a requirement of the role, not merely an advantage.
• Demonstrated track record of leading audits independently from planning through to reporting and follow-up, ideally spanning both business process and technology-related audits.

Skills

• Strong technical audit execution skills — testing design, sampling, evidence evaluation, and root-cause analysis.
• Confident, articulate communicator able to present and defend findings to management under scrutiny.
• Sound working knowledge of risk management principles and control frameworks.
• Strong personal organisation — able to manage multiple concurrent engagements and deadlines with minimal supervision.
• Ability to maintain the highest levels of integrity, confidentiality, and objectivity.
• Comfortable operating across multiple markets and cultures, with willingness to travel.

Why M-KOPA?

At M-KOPA, we empower our people to own their careers through diverse development programs, coaching partnerships, and on-the-job training. We support individual journeys with family-friendly policies, prioritize well-being, and embrace flexibility.

• Lead assigned audits from start to finish — planning and scoping, fieldwork/testing, documentation, reporting, and follow-up — in line with IIA standards and internal methodology.
• Independently manage engagement timelines, evidence quality, and working paper standards without close supervision.
• Identify root causes (not just symptoms), assess risk impact accurately, and develop practical, actionable recommendations.
• Apply data analytics and audit management tooling to strengthen coverage and efficiency across engagements.
• Present audit findings directly to process owners and management, defending conclusions and negotiating realistic, risk-appropriate remediation actions.
• Prepare clear, well-evidenced audit reports for review by the Head of Internal Audit & Risk.
• Build credible working relationships with process owners and country teams to enable efficient fieldwork and honest engagement.
• Contribute to the development of the annual risk-based audit plan, including scoping proposed engagements and estimating resourcing.
• Flag emerging risks identified during fieldwork for inclusion in future audit cycles or escalation to the Head of Internal Audit & Risk.
• Track closure of agreed management actions, escalating overdue or inadequately remediated items.
• Support development of audit methodology, templates, and standards as the function matures.
• Mentor and provide on-the-job guidance to junior audit team members where applicable.

• Strong technical audit execution skills — testing design, sampling, evidence evaluation, and root-cause analysis.
• Confident, articulate communicator able to present and defend findings to management under scrutiny.
• Sound working knowledge of risk management principles and control frameworks.
• Strong personal organisation — able to manage multiple concurrent engagements and deadlines with minimal supervision.
• Ability to maintain the highest levels of integrity, confidentiality, and objectivity.
• Comfortable operating across multiple markets and cultures, with willingness to travel.

• Degree in a business-related field, IT, Business Information Systems, or a related technical/business field from a recognised university.
• Professional certification required: one of Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), or ACCA (or equivalent, e.g. CPA).
• Additional certifications (e.g. CISM) are an added advantage.