Background information about the job or company

The Nyeri National Polytechnic is one of the TVET institutions charged with the mandate of training middle level technical and vocational labor force. In the global arena, Science, Technology and Innovation (ST & I) are the drivers for rapid world’s economic prosperity, social development and provide tools and solutions to address global challenges. Fo...

Responsibilities or duties

Conducting comprehensive audits of core business applications, databases, operating systems and network infrastructure to evaluate system reliability, data integrity and security controls.

Reviewing and testing access management. change management. backup/disaster recovery and computer operations across alt polytechnic's departments.

Planning. executing and documenting audit fieldwork in accordance with Institute of Internal Auditors (IIA) standards.

Drafting clear, concise and objective audit reports highlighting system vulnerabilities. risks, root causes and practical management recommendations.

Assisting in technical investigations regarding system misuse, data breaches or automated process failures.

Ensuring institution-wide compliance with internal ICT policies. standard operating procedures and relevant regulatory standards (e.g. Data Protection Act. Computer Misuse and Cybercrimes Act).

Tracking and verifying the implementation of management action plans addressing previously identified IT audit findihgs.

Performing any other relevant duties as may be assigned by the Head of Internal Audit or Audit Committee.

Qualifications or requirements

Be a holder of a bachelor's degree in Computer Science or IT related field from a recognized university.

Should possess professional qualification in Certified Information Systems Auditor currently pursUing).

Registration with a relevant professionai body, Institute of Internal Auditors (IIÄ) is an added advantage.

Experience needed

A minimum of four. (4) years of active experience in IT audit, system administration or cybersecurity assessment.

Experience in public sectot or learning institution.

Any other provided details

Key Competencies

Strong knowledge of IT systems, cybersecurity and internal controls.

Excellent analytical and problem-solving skills.

Strong communication and report writing skills.

High integrity and professional independence.

Ability to work under minimal supervision and meet deadlines.

• Conducting comprehensive audits of core business applications, databases, operating systems and network infrastructure to evaluate system reliability, data integrity and security controls.
• Reviewing and testing access management. change management. backup/disaster recovery and computer operations across alt polytechnic's departments.
• Planning. executing and documenting audit fieldwork in accordance with Institute of Internal Auditors (IIA) standards.
• Drafting clear, concise and objective audit reports highlighting system vulnerabilities. risks, root causes and practical management recommendations.
• Assisting in technical investigations regarding system misuse, data breaches or automated process failures.
• Ensuring institution-wide compliance with internal ICT policies. standard operating procedures and relevant regulatory standards (e.g. Data Protection Act. Computer Misuse and Cybercrimes Act).
• Tracking and verifying the implementation of management action plans addressing previously identified IT audit findihgs.
• Performing any other relevant duties as may be assigned by the Head of Internal Audit or Audit Committee.

• Strong knowledge of IT systems, cybersecurity and internal controls.
• Excellent analytical and problem-solving skills.
• Strong communication and report writing skills.
• High integrity and professional independence.
• Ability to work under minimal supervision and meet deadlines.

• Be a holder of a bachelor's degree in Computer Science or IT related field from a recognized university.
• Should possess professional qualification in Certified Information Systems Auditor currently pursUing).
• Registration with a relevant professionai body, Institute of Internal Auditors (IIÄ) is an added advantage.