Job Purpose:

The Systems Auditor will play a critical role in safeguarding Tower SACCO Society's information systems and business processes. This position ensures risks are identified, controls are evaluated, and compliance is maintained, providing independent assurance on the integrity of the organization's internal control environment.

Key Responsibilities:

• Lead the information system audit function within the Internal Audit Department.
• Develop and implement the annual IS audit plan in collaboration with the Head of Internal Audit.
• Ensure SACCO maintains robust IS policies and procedures that minimize risk while supporting efficiency.
• Support the Audit Committee with accurate reports during the monthly and quarterly board reviews.
• Assess risks in SACCO's information systems and recommend mitigation measures.
• Conduct special audits and investigations as required.
• Conduct system implementation review on new software and system upgrades undertaken.
• Evaluate compliance with IS policies, procedures, and operating instructions.
• Track and follow up on audit findings to ensure timely closure.
• Review business continuity and disaster recovery plans, including backup procedures and usability.
• Evaluate and report on system infrastructure, system development processes and life cycle management.
• Audit network security, firewalls and user access controls to prevent data breaches.
• Recommend improvements to audit procedures for enhanced efficiency.
• Execute multiple audit projects, ensuring scope, timing, and regulatory compliance.
• Monitor implementation of defined controls and recommendations.
• Any other duty that may be assigned by the Head of Internal Audit, the CEO or any authorized officer.

Preferred Qualifications:

• Bachelor of Science degree in Information Technology or related field or either a Bachelor's degree in Economics, Commerce or related field.
• Certified Information Systems Auditor (CISA) qualification is mandatory.
• Additional certifications such as Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), Certified in Risk & Information Systems Control (CRISC) or Cisco certifications (CCNA, CCSP) are an added advantage.
• At least 5 years relevant experience in System Audit or Information Technology environment.
• KCSE mean Grade C (plain) with C plain in Mathematics and English.
• Above 30 years.
• Be of exemplary integrity and honesty.

Required Documents Upon Successful Application:

• Clearance certificate from the Ethics & anti-corruption commission (EACC)
• Tax compliance certificate from the Kenya Revenue Authority (KRA)
• A valid certificate of good conduct
• Clearance certificate from the Higher Education Loans board (HELB)
• Clearance certificate from the Credit Reference Bureau (CRB)

Note:

Only shortlisted candidates will be contacted.

• Lead the information system audit function within the Internal Audit Department.
• Develop and implement the annual IS audit plan in collaboration with the Head of Internal Audit.
• Ensure SACCO maintains robust IS policies and procedures that minimize risk while supporting efficiency.
• Support the Audit Committee with accurate reports during the monthly and quarterly board reviews.
• Assess risks in SACCO's information systems and recommend mitigation measures.
• Conduct special audits and investigations as required.
• Conduct system implementation review on new software and system upgrades undertaken.
• Evaluate compliance with IS policies, procedures, and operating instructions.
• Track and follow up on audit findings to ensure timely closure.
• Review business continuity and disaster recovery plans, including backup procedures and usability.
• Evaluate and report on system infrastructure, system development processes and life cycle management.
• Audit network security, firewalls and user access controls to prevent data breaches.
• Recommend improvements to audit procedures for enhanced efficiency.
• Execute multiple audit projects, ensuring scope, timing, and regulatory compliance.
• Monitor implementation of defined controls and recommendations.
• Any other duty that may be assigned by the Head of Internal Audit, the CEO or any authorized officer.

• Information Systems Auditing
• Risk Assessment
• Internal Controls Evaluation
• Compliance Monitoring
• Network Security Auditing
• Business Continuity Planning
• Disaster Recovery Planning
• System Implementation Review
• Audit Procedure Improvement
• Project Management
• Data Breach Prevention
• User Access Control Auditing
• Firewall Auditing

• Bachelor of Science degree in Information Technology or related field OR Bachelor's degree in Economics, Commerce or related field.
• Certified Information Systems Auditor (CISA) qualification (mandatory).
• Additional certifications such as CISM, CISSP, CRISC, or Cisco certifications (CCNA, CCSP) are an added advantage.
• KCSE mean Grade C (plain) with C plain in Mathematics and English.
• Exemplary integrity and honesty.