Assistant Manager Information Systems Audit

Responsible for examining, evaluating, and verifying the Bank’s information systems, technology processes, procedures, internal controls, and data to provide independent assurance on the adequacy and effectiveness of ICT governance, risk management, and controls.

Plan, execute, and report on risk-based Information Systems (IS) audits covering core banking systems, digital and agency banking platforms, cybersecurity, data governance, technology projects, and disaster recovery.

Key Responsibilities

• Ensure adequate internal controls exist within information systems and that data integrity and protection are maintained.
• Plan, execute, and lead information security audits across the Bank.
• Assess the adequacy and effectiveness of ICT governance, technology risk management, internal controls, and information security controls.
• Review information systems, applications, databases, networks, operating systems, technology infrastructure, and related security controls.
• Evaluate core banking systems and critical applications for application controls, configurations, interfaces, data integrity, security, and availability.
• Review controls over digital, mobile, agency banking, and other electronic channels, including fraud prevention and customer data protection.
• Assess compliance of ICT operations with internal policies, laws, regulations, regulatory guidelines, and professional standards.
• Review identity and access management controls, including user administration, privileged access, authentication, segregation of duties, and access reviews.
• Evaluate system acquisition, development, implementation, integration, migration, and change management controls.
• Provide independent assurance over ICT and digital transformation projects.
• Review controls over data governance, quality, privacy, classification, retention, backup, and recovery.
• Assess business continuity management, disaster recovery capabilities, system resilience, and recovery testing.
• Evaluate third-party, outsourced, vendor, and cloud technology arrangements for security and operational risks.
• Review technology incident management processes, investigations, root-cause analysis, and corrective actions.
• Execute and document audit procedures and ensure findings are supported by sufficient audit evidence.
• Use Computer-Assisted Audit Techniques (CAATs), data analytics, and technology-enabled audit tools to improve audit coverage and identify anomalies.
• Perform forensic and investigative systems audits when required.
• Develop recommendations to strengthen information security, system controls, and operational effectiveness.
• Collaborate with management and departments to improve security compliance,
• manage risk, and enhance operational efficiency.
• Prepare audit reports and provide support for complex data analysis and extraction exercises.
• Monitor implementation of agreed audit recommendations and escalate unresolved or recurring issues.
• Qualifications and Requirements
• At least 12 years of relevant work experience in the public or private sector, including 3 years in a supervisory position.
• Master’s Degree in Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science, Cybersecurity, or related field.
• Bachelor’s Degree in Accounting, Finance, Business Administration, Information Technology, Information Systems, Computer Science, or equivalent qualification.
• Professional certification such as:
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Or an equivalent professional qualification
• Registered member of ISACA or another recognized professional body in good standing.
• Management course lasting at least four (4) weeks from a recognized institution.

Knowledge and Skills

• Demonstrated experience in information systems auditing.
• Strong knowledge of core banking systems, digital financial services, application controls, databases, networks, and ICT infrastructure.
• Knowledge of banking regulations, cybersecurity requirements, ICT governance standards, and data protection frameworks.
• Experience applying CAATs, data analytics, and technology-enabled audit tools.
• Strong analytical, investigative, problem-solving, and report-writing skills.
• Excellent communication and stakeholder engagement skills.
• Sound understanding of ICT risk assessment, internal controls, and audit methodologies.
• Additional Requirement
• Must have fulfilled the requirements of Chapter Six of the Constitution of Kenya.
• How to apply
• For more information and job application details, see;
• Postbank Assistant Manager Information Systems Audit Jobs in Kenya
• Find daily jobs in Kenya. Jobs - Kenya jobs. Search our career portal & find the latest Kenyan job positions, career opportunities & jobs in Kenya.
• Jobs in Kenya - banking jobs, IT jobs, accounting jobs, NGO jobs, business administration, ICT, UN jobs, procurement jobs, education jobs, hospital jobs, human resources jobs, engineering, teaching jobs, and other careers in Kenya.
• Find your dream job from 1000s of vacancies in Kenya posted and updated daily - click here!
• Click here to post comments
• Join in and write your own page! It's easy to do. How? Simply click here to return to
• 1 Best Africa Jobs
• .