BANK OF AFRICA - KENYA LIMITED (BOA-KENYA) is a commercial bank providing banking services to corporate, SME and retail clientele.

Senior IT Auditor

Responsibilities and Accountabilities

• Assist in the development and revision/update of the annual IT audit strategy.
• Document findings (including identified control weaknesses/lapses) and proffer appropriate recommendations to ensure the optimal use of IT to support business objectives in a controlled manner.
• Interface with the IT and IT Risk Management (as appropriate) to provide optimal support for the execution of IT audit assignments, resolutions of issues and implementation of effective control measures/ mechanisms.
• Work with external auditors and regulatory examiners and provide required assistance in their conduct of regulatory and statutory review/examination of the Bank’s IT-related transactions and activities.
• Participate in process reviews/redesigns as well as systems upgrade/implementation efforts to ensure that appropriate system controls considerations are effectively taken on board and implemented.
• Prepare activity and performance reports on a timely basis, for the attention of the Head of Audit.
• Monitor the adequacy of security and control built into the bank’s computer system.
• Ensure regular audit of all computer system operations.
• Ensure regular audit of all Digital Banking Systems and Operations.
• Assess and address risks and controls relating to hardware, software, data, and IT system.
• Render technical support to other departments in Inspections.
• Carrying out/participating in Head Office Department and Branch audits whenever called upon to do the same
• Participate in Departmental meetings and activities as required.

Minimum Requirements; Work Experience, Academic and Professional Qualifications.

• Bachelor’s degree in information systems/technology, computer science essential
• Professional Qualifications in CISA, CISM, essential
• Professional Qualifications in CIA, CPA, desired
• High School Certificate KCSE
• 4 years’ experience in a financial institution with demonstrated knowledge and practical application of ISACA’s IT standards and code of ethics for IT auditors
• Knowledge of Information systems governance and security principles and practice ISO 27001, COBIT 5.
• Member of ISACA

Competencies and Attributes

• Structured Query Language (SQL Navigator): Ability to query and operate database systems
• Network Infrastructure Knowledge: Knowledge of hardware and networking software components that make up a network i.e., devices, cables, and protocols used to connect them.
• Database Operations Knowledge: knowledge of Database storage, modifications, management, and retrieval of data/information.
• Application Programming Knowledge: Understanding of languages, frameworks, and architecture of applications.
• Digital Banking Systems and Operations Knowledge: Knowledge of Mobile banking, internet banking and related technologies.
• Microsoft Office tools: Conversant with the MS Office Suite.
• Good analytical skills: Problem-solving skills that help you parse data and information to develop creative, rational solutions.
• Excellent writing skills: Good presentation skills can write effectively and succinctly.
• Strong attention to detail and ability to work under pressure.

• Assist in the development and revision/update of the annual IT audit strategy.
• Document findings (including identified control weaknesses/lapses) and proffer appropriate recommendations to ensure the optimal use of IT to support business objectives in a controlled manner.
• Interface with the IT and IT Risk Management (as appropriate) to provide optimal support for the execution of IT audit assignments, resolutions of issues and implementation of effective control measures/ mechanisms.
• Work with external auditors and regulatory examiners and provide required assistance in their conduct of regulatory and statutory review/examination of the Bank’s IT-related transactions and activities.
• Participate in process reviews/redesigns as well as systems upgrade/implementation efforts to ensure that appropriate system controls considerations are effectively taken on board and implemented.
• Prepare activity and performance reports on a timely basis, for the attention of the Head of Audit.
• Monitor the adequacy of security and control built into the bank’s computer system.
• Ensure regular audit of all computer system operations.
• Ensure regular audit of all Digital Banking Systems and Operations.
• Assess and address risks and controls relating to hardware, software, data, and IT system.
• Render technical support to other departments in Inspections.
• Carrying out/participating in Head Office Department and Branch audits whenever called upon to do the same
• Participate in Departmental meetings and activities as required.

• Structured Query Language (SQL Navigator): Ability to query and operate database systems
• Network Infrastructure Knowledge: Knowledge of hardware and networking software components that make up a network i.e., devices, cables, and protocols used to connect them.
• Database Operations Knowledge: knowledge of Database storage, modifications, management, and retrieval of data/information.
• Application Programming Knowledge: Understanding of languages, frameworks, and architecture of applications.
• Digital Banking Systems and Operations Knowledge: Knowledge of Mobile banking, internet banking and related technologies.
• Microsoft Office tools: Conversant with the MS Office Suite.
• Good analytical skills: Problem-solving skills that help you parse data and information to develop creative, rational solutions.
• Excellent writing skills: Good presentation skills can write effectively and succinctly.
• Strong attention to detail and ability to work under pressure.

• Bachelor’s degree in information systems/technology, computer science essential
• Professional Qualifications in CISA, CISM, essential
• Professional Qualifications in CIA, CPA, desired
• High School Certificate KCSE
• 4 years’ experience in a financial institution with demonstrated knowledge and practical application of ISACA’s IT standards and code of ethics for IT auditors
• Knowledge of Information systems governance and security principles and practice ISO 27001, COBIT 5.
• Member of ISACA