Information Systems Auditor

Reporting to the Group Internal Audit Manager, the Information Systems Auditor is responsible for conducting comprehensive information systems audits across the Madison Group. The role involves preparing detailed audit reports, identifying issues related to internal controls and risk management, and providing systematic evaluations of the adequacy, effectiveness, and efficiency of the Group’s risk management processes and internal control systems. The individual will recommend corrective actions to improve efficiency and reduce operational costs. Key responsibilities include assisting in risk identification and assessment, preparing the IS audits annual plan in collaboration with the Head of Department, and creating detailed IS Audit planning memoranda, audit programs, and procedures for each assignment. The role requires executing IS audit assignments while documenting well-referenced working papers and evidence in accordance with IS audit standards and best practices. Additionally, the Information Systems Auditor will evaluate controls for information systems and technology processes, including data protection, change management, and cyber security, and prepare concise, accurate reports for management distribution. The position also involves performing audit follow-up to ensure timely closure of audit findings and participating in quality assurance for technology acquisition and implementation.

Bachelor’s degree in Information Technology, Computer Science, or a related field; Professional certification such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), or equivalent; Minimum of 3-5 years of progressive experience in information systems auditing, IT risk management, or related fields; Strong understanding of IT governance frameworks (e.g., COBIT, ISO 27001, NIST); Experience in evaluating IT controls, cybersecurity frameworks, and data protection measures; Proficiency in audit methodologies, risk assessment techniques, and compliance standards; Excellent analytical, problem-solving, and communication skills; Ability to work independently and collaboratively in a team environment; Familiarity with audit software tools and data analysis techniques; Knowledge of Kenyan regulatory requirements for insurance and financial services is an added advantage.