Virtual Pay represents a new breed of payment companies, built from the ground up with a laser-focus of innovating and seamlessly integrating tomorrow's payment solutions.

Internal Auditor

Job Type

Full Time

Qualification

BA/BSc/HND , Professional Certificate

Experience

5 - 7 years

Location

Nairobi

Job Field

Finance / Accounting / Audit

Job Summary

The Internal Auditor provides independent, risk-based assurance across the Company’s key business functions by evaluating controls over financial and operational activities, technology and systems, information security, compliance, and governance frameworks.

The Internal Auditor plans and independently executes end-to-end audits across the organization, covering Finance, Settlements and Reconciliations, Operations, Technology, IT systems, ISMS/Information Security, AML/CFT, Risk, Compliance, and other business functions.

This is a hands-on operational role requiring strong traditional financial and controls audit capability combined with practical knowledge of technology systems and IT controls. The role requires strategic thinking and professional judgement to identify systemic and emerging risks, while remaining focused on execution, evidence-based findings and practical remediation.

Key Responsibilities

Internal Audit Execution

• Develop and execute a risk-based internal audit plan covering key financial, operational, technology, compliance and information security risks.
• Personally conduct audits from planning and scoping through testing, analysis, reporting and follow-up.
• Evaluate the design and effectiveness of internal controls, policies, processes and risk mitigation measures.
• Conduct special, investigative and ad hoc audits as required by Management or the Board Audit C Risk Committee.

Financial, Operational C Compliance Audits:

• Audit financial processes including revenue, expenditure, treasury, settlements, reconciliations, payroll, procurement and financial reporting.
• Evaluate operational processes to identify control weaknesses, inefficiencies, and fraud risks, and recommend corrective actions.
• Assess compliance with all regulatory laws, regulations, internal policies and delegated authorities.
• Audit AML/CFT, fraud prevention, sanctions and other financial crime controls.

Technology C Systems Audits:

• Conduct IT and systems audits covering access controls, system changes, application controls, backups, data integrity, system availability and IT operations.
• Review system configurations, logs, reports, data and other technical evidence to validate control effectiveness.
• Identify technology, cybersecurity and information security risks arising from systems, processes and integrations.
• Evaluate business processes to pinpoint opportunities for IT system upgrades and acquisitions.

Audit Reporting C Remediation:

• Prepare clear, concise and evidence-based audit reports identifying findings, root causes, risk implications and practical recommendations.
• Discuss findings with process owners and management and facilitate agreement on appropriate corrective actions.
• Maintain an audit issues register and independently follow up on agreed actions to confirm effective and timely remediation.
• Escalate significant, overdue or unresolved high-risk issues to Management and the Board Audit C Risk Committee.

External Audit C Assurance Coordination:

• Act as the key liaison between the Company and external auditors, coordinating audit requests, information requirements, meetings and access to relevant documentation.
• Coordinate responses to external audit findings and track management actions arising from external audits.
• Support effective coordination between internal and external assurance activities and minimize duplication of audit work.
• Provide relevant internal audit reports and insights to support external audits and other independent assurance reviews.

Key qualifications:

• BCom degree specializing in Accounting/Finance, Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Risk Management or a related field.
• Professional certification such as CIA, CPA/ACCA, CISA, CRISC, ISO 27001 Lead Auditor or equivalent.
• 5–7+ years' relevant experience in internal audit, external audit, IT audit, risk or assurance.
• Demonstrated experience conducting both financial/operational audits and technology/systems audits.
• Experience in fintech, payments, banking, financial services or another regulated environment is highly desirable.
• Practical experience with ISO 27001/ISMS, AML/CFT, cybersecurity, IT controls and regulatory compliance is an advantage.

Benefits

Competitive Remuneration

• Develop and execute a risk-based internal audit plan covering key financial, operational, technology, compliance and information security risks.
• Personally conduct audits from planning and scoping through testing, analysis, reporting and follow-up.
• Evaluate the design and effectiveness of internal controls, policies, processes and risk mitigation measures.
• Conduct special, investigative and ad hoc audits as required by Management or the Board Audit C Risk Committee.
• Audit financial processes including revenue, expenditure, treasury, settlements, reconciliations, payroll, procurement and financial reporting.
• Evaluate operational processes to identify control weaknesses, inefficiencies, and fraud risks, and recommend corrective actions.
• Assess compliance with all regulatory laws, regulations, internal policies and delegated authorities.
• Audit AML/CFT, fraud prevention, sanctions and other financial crime controls.
• Conduct IT and systems audits covering access controls, system changes, application controls, backups, data integrity, system availability and IT operations.
• Review system configurations, logs, reports, data and other technical evidence to validate control effectiveness.
• Identify technology, cybersecurity and information security risks arising from systems, processes and integrations.
• Evaluate business processes to pinpoint opportunities for IT system upgrades and acquisitions.
• Prepare clear, concise and evidence-based audit reports identifying findings, root causes, risk implications and practical recommendations.
• Discuss findings with process owners and management and facilitate agreement on appropriate corrective actions.
• Maintain an audit issues register and independently follow up on agreed actions to confirm effective and timely remediation.
• Escalate significant, overdue or unresolved high-risk issues to Management and the Board Audit C Risk Committee.
• Act as the key liaison between the Company and external auditors, coordinating audit requests, information requirements, meetings and access to relevant documentation.
• Coordinate responses to external audit findings and track management actions arising from external audits.
• Support effective coordination between internal and external assurance activities and minimize duplication of audit work.
• Provide relevant internal audit reports and insights to support external audits and other independent assurance reviews.

• BCom degree specializing in Accounting/Finance, Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Risk Management or a related field.
• Professional certification such as CIA, CPA/ACCA, CISA, CRISC, ISO 27001 Lead Auditor or equivalent.
• Demonstrated experience conducting both financial/operational audits and technology/systems audits.
• Practical experience with ISO 27001/ISMS, AML/CFT, cybersecurity, IT controls and regulatory compliance is an advantage.