Financial Services

Information Systems Auditor

GDC SACCO Society Limited·Nairobi, kenya·Full Time·Internship
Financial ServicesFull TimeInternship
-Closes 27 Nov 2026

Key Responsibilities

The incumbent will report to the Internal Audit Manager and will be responsible for:

  • Conducting end-to-end information systems audits and providing actionable recommendations.
  • Evaluating general and application controls across IT systems.
  • Reviewing IT processes including system security, data integrity, backup and effectiveness of IT Business Continuity Management.
  • Identifying system vulnerabilities in the process of continuous audits and recommending control improvements.
  • Performing preliminary IT-related forensic audit and investigations where necessary.
  • Preparing audit reports and presenting findings to management.
  • Following up and issuing assurance on IT audit recommendations to the status of implementation.
  • Giving assurance on IT project implementation and innovations to ensure adherence to security and project implementation standards.
  • Providing advice, insight and foresight support on IT risks and controls.
  • Supporting operational, compliance and financial audits as assigned.
  • Any other related duty as may be assigned.

Skills, Competencies & Experience

The successful candidate will be required to have the following skills and competencies:

  • Bachelor's degree in Information Systems or Computer Science from a recognized university. Possession of an MSc or other relevant postgraduate qualification will be an added advantage.
  • Certified Information Systems Auditor (CISA) is a mandatory requirement.
  • Professional certification in IT Audit, Risk and Security e.g. CISM, CISSP, CISA, CRISC.
  • CPA (Part II) or ACCA (Level II) will be an added advantage.
  • Knowledge of IT governance frameworks, cybersecurity, database auditing, data analytics and financial systems.
  • Minimum of three (3) years' experience in IT audit or a similar role.
  • Demonstrable knowledge in risk assessment and control concepts/methodologies.
  • Excellent oral and written skills.
  • Excellent qualitative and quantitative analytical ability.
  • Excellent attention to detail and organizational skills.

Key skills

BA/BSc/HNDProfessional Certificate
Apply Now
Send your CV along with a cover letter tohr@gdcsacco.co.ke

Please use the job title as the subject line of your email.

At a glance

Company

GDC SACCO Society Limited

Location

Nairobi, kenya

Employment

Full Time

Work style

Internship

Experience

Valid until

November 27, 2026

Created

November 13, 2026

More opportunities

Similar roles you might like

Manager, Assurance

I&M Bank

Nairobi, kenya

full-time

Roles & Responsibilities Key Responsibilities: Provide input to the Chief Audit Executive in preparing the annual audit plan for approval by the BAC. Review the adequacy of the team's planning work, including document review, prior reports, data analysis, interviews/walkthroughs, risk assessment, sampling and related planning activities. Prepare a planning document and agree with the Chief Audit Executive the audit objectives, methodology, scope and key risk areas for each assignment. Evaluate prepared audit tests to ensure they address identified risks and achieve audit objectives and continuously monitor them for efficiency and effectiveness. Perform quality assurance to ensure all evidence and working papers meet the standards required to support the audit findings, root causes, risks, recommendations and conclusions. Conduct special audits and audits of functions/processes that undergo significant changes and prepare appropriate audit reports. Continuously review audit objectives, tests and risks to ensure all relevant ones are covered. Ensure key weaknesses and existing or potential risks are clearly highlighted before report approval and issuance.. Lead follow up on post-exit clarifications and management actions Attend BAC meetings and present assurance-related reports and others as required. Determine training needs with the team and, in agreement with the Chief Audit Executive, assign appropriate learning/development programmes. Maintain good relationships with audit clients through regular engagement on and off audit engagements. Academic Qualifications: Bachelor's Degree in Finance, Accounting, Business or any other related course. Professional Qualifications / Membership to professional bodies/ Publication: Mandatory: Certified Public Accountant (CPA). Certified Internal Auditor (CIA). Added Advantage: Certified Information Systems Auditor (CISA). Certified Internal Audit Quality Assessor (CIAQA). CISCO Certified Networks Associate (CCNA). Certified Information System Security Professional (CISSP). Memberships: ICPAK. IIA. ISACA. Work Experience Required: Over seven (7) years' relevant experience with over three (3) years in a senior management role in a similar sized organization. Competencies: Planning & Organizational skills. Analytical skills and attention to detail. Strong oral and written communication skills. Interpersonal skills to manage stakeholders at all levels. Strong Ethics and impeccable integrity. Excellent judgment and analytical abilities and impeccable integrity. Strong commercial awareness and an ability to connect to business goals. Banking and Risk Knowledge.

4 days ago

Manager, Advisory

I&M Bank

Nairobi, kenya

full-time

Job Purpose: The role holder is responsible for executing the Advisory audit plan on special engagements requested by Senior Management/Management committees/Board Audit Committee, Project audits, product implementation as well as strategic initiatives. This role is also responsible for follow up on corrective action plans and providing assurance on closure corrective action plan (CAPs). Roles & Responsibilities Key Responsibilities: Conduct process walkthroughs and generate process walkthroughs, review governance framework/documents (policies, procedures/manuals, guides), past audits, management/Board committee minutes, department minutes, performance metrics, RCSA/KRI, Structures, Job roles. Design audit tests aligned to the risk, audit scope and audit objectives in audit management software. Perform the audit tests on the samples as documented in the program. This is through interviewing/inquiry, observation, reperformance, analytics and substantive tests. Engage supervisor for any queries and clarifications they have raised. Deal with those requiring additional work, clarify those requiring clarifications or engage audit client for those requiring their clarification. Generate the draft report using the required template, then review it for clarity, conciseness, completeness, and correctness. Review assignment to ensure all supervisor queries were responded to, client queries and clarifications were addressed and all actions reflect the most current client position. Follow up with audit clients for status updates for the corrective action plans. Supervise and guide staff performing assignments from time to time. Academic Qualifications: Bachelor's Degree in Finance, Accounting, Business or any other related course. Professional Qualifications / Membership to professional bodies/ Publication: Certified Public Accountant (CPA). Member of ICPAK. Certified Internal Auditor (CIA). Certified Information Systems Auditor (CISA). Certified Internal Audit Quality Assessor (CIAQA). CISCO Certified Networks Associate (CCNA). Certified Information System Security Professional (CISSP). Work Experience Required: Over four (4) years' relevant experience with over a year in a senior management role in a similar sized organization. Competencies: Planning & Organizational skills. Analytical skills and attention to detail. Strong oral and written communication skills. Interpersonal skills to manage stakeholders at all levels. Ethics and integrity. Excellent judgment and analytical abilities and impeccable integrity. Strong commercial awareness and an ability to connect to business goals. Banking Knowledge. Risk Knowledge.

4 days ago

Information System Auditor

GA Insurance

Nairobi, kenya

full-time

Job Purpose This position is responsible for providing independent assurance on GA Insurance Limited's information systems, by ensuring that the risk management, governance processes, and controls that are in place are adequate to always safeguard the information systems of the Company. Key Responsibilities Participate in the development, implementation, and monitoring of the annual information systems internal audit plan. Perform assessments of all the business information systems to evaluate the adequacy of controls, effectiveness, and efficiency to support business processes. Evaluate the adequacy and effectiveness of controls for information systems and technology processes, including those related to data protection, change management, and cyber security. Perform compliance assessments of information systems processes against industry frameworks, regulations, and standards such as the National Institute of Standards and Technology framework (NIST), International Organization for Standardization (ISO), Payment Card Industry Data Security Standard (PCI DSS), and the Data Privacy & Protection Act. Communicate audit results and recommendations to key stakeholders including management and business process owners. Collaborate with the Technology Services and IT security teams to ensure that appropriate controls are in place to function effectively. Update emerging changes and security risks and threats in the information systems landscape and provide relevant and timely advice to stakeholders where necessary. Review the IT governance documents, strategies, policies, contracts, and procedure documents. Provide advice in resolving information security incidents. Participate in ensuring quality in all work delivered including meeting the standards for working papers and supporting the implementation of audit findings' recommendations, and conclusions. Provide support in drafting suitable audit reports highlighting key control weaknesses as well as non-compliance with procedures, policies, and regulatory requirements. Participate in the preparation of the Board Audit Committee files. Provide internal audit services for GA Insurance subsidiaries namely GA Life, GA Uganda and GA Tanzania. Qualifications and Experience Education: A bachelor's degree in accounting, Finance, Commerce, Economics, IT or a related field Professional Certification: Qualification in information systems audit such as Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Security Manager (CISM) or Certified Internal Auditor (CIA) is an added advantage Experience: Minimum of 3 years in motor claims- general insurance. Technical & Behavioral Competencies Strong foundation in internal audit standards and practices, including audit procedures, risk management, information systems governance and security, CAATs, project management, report writing, and the ability to evaluate business processes and technology environments. Results-driven and detail-oriented professional with strong analytical, problem-solving, customer service, and collaboration skills, demonstrating integrity, emotional intelligence, agility in managing competing priorities, and the ability to work both independently and within teams.

7 days ago

Assistant Manager Information Systems Audit

Postbank

Nairobi, kenya

full-time

About the role Responsible for examining, evaluating and verifying the Bank's information systems, technology processes, procedures, internal controls and data to provide independent assurance on the adequacy and effectiveness of ICT governance, risk management and controls. Plans, executes and reports on risk-based IS audits covering core banking systems, digital/agency platforms, cybersecurity, data governance, technology projects, and disaster recovery. Key responsibilities Ensure through planning that there are adequate internal controls in the systems, that there is adequate protection of data and ensure its integrity Plan, execute and lead information security audits across the bank Asses the adequacy and effectiveness of ICT governance, technology risk management, internal controls and information-security arrangements Inspect and evaluate information systems, applications, databases, networks, operating systems, technology infrastructure and related security controls Review the Bank's core banking system, and other critical applications for adequacy of application controls, interfaces, configurations, data integrity, security and availability Review controls over digital, mobile, agency banking and other electronic channels, including transaction processing, system availability, customer-data protection and fraud-prevention controls Evaluate the efficiency, effectiveness and compliance of information systems and technology operations with Bank policies, applicable laws, regulations, regulatory guidelines and recognized professional standards Review identity and access-management controls, including user administration, privileged access, segregation of duties, authentication and periodic access reviews Review system acquisition, development, implementation, integration, migration and change-management processes for adequate governance, authorization, testing, security and controls Provide independent assurance over ICT and digital-transformation projects, including project governance, system implementation, data migration and post-implementation controls Review controls over data governance, quality, integrity, privacy, classification, retention, backup and recovery Assess business continuity, ICT disaster recovery, system resilience, backup arrangements and recovery testing Review third-party, outsourced, vendor and cloud technology arrangements for information-security, data-protection, service-continuity and related technology risks Review technology incident-management processes, including identification, escalation, investigation, root-cause analysis and corrective actions Execute and document audit procedures and ensure findings and conclusions are supported by sufficient and appropriate audit evidence Apply Computer-Assisted Audit Techniques (CAATs), data analytics and other technology-enabled audit tools to analyse data, identify anomalies, test controls and enhance audit coverage Perform forensic investigative systems audits as may be required Develop rigorous best practice recommendations to improve system security on all levels Work with management to ensure security recommendations comply with the banks operations Collaborate with departments to improve security compliance manage risk and bolster effectiveness Prepare reports of system audits findings in addition to providing support for sophisticated data analysis and extraction through computer assisted audit techniques (CAATs) Monitor and validate implementation of agreed audit actions and escalate overdue, recurring or inadequately addressed issues Qualifications and requirements At least twelve (12) years' relevant work experience in Public Service or Private Sector, three (3) of which must have been in a supervisory position Master's degree in Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science, Cybersecurity or equivalent qualification from a recognized institution Bachelor's degree in Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science or equivalent qualification from a recognized institution Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or equivalent relevant professional qualification Registered member of ISACA or equivalent relevant recognized professional body in good standing Attended a Management Course lasting not less than four (4) weeks from a recognized institution Demonstrated knowledge and experience in information systems auditing Knowledge of core banking systems, digital financial services, application controls, databases, networks and technology infrastructure Knowledge of applicable banking, cybersecurity, data-protection and ICT regulatory requirements and relevant professional frameworks Demonstrated ability to apply CAATs, data analytics and technology-enabled audit tools Strong numerical, analytical, problem-solving, communication and report-writing skills Fulfilled the requirements of Chapter Six of the Constitution of Kenya

14 days ago

Internal Audit Senior

M-KOPA

Nairobi, Nairobi County, Kenya, kenya

Full-time

We are looking for an Internal Audit Senior to join our Legal group as we scale up and drive digital and financial inclusion across our markets.Job PurposeYou will lead individual internal audit engagements end-to-end across M-KOPA's operating markets (Kenya, Uganda, Nigeria, Ghana, and South Africa), reporting to the Head of Internal Audit & Risk. This is an execution and delivery role: you own audits from planning through to reporting and follow-up, contribute directly to the annual audit plan, and present findings to management with the judgement and rigour expected of a seasoned, hands-on auditor.Key Job FunctionsAudit ExecutionLead assigned audits from start to finish planning and scoping, fieldwork/testing, documentation, reporting, and follow-up in line with IIA standards and internal methodology. Independently manage engagement timelines, evidence quality, and working paper standards without close supervision. Identify root causes (not just symptoms), assess risk impact accurately, and develop practical, actionable recommendations. Apply data analytics and audit management tooling to strengthen coverage and efficiency across engagements. Reporting & Stakeholder ManagementPresent audit findings directly to process owners and management, defending conclusions and negotiating realistic, risk-appropriate remediation actions. Prepare clear, well-evidenced audit reports for review by the Head of Internal Audit & Risk. Build credible working relationships with process owners and country teams to enable efficient fieldwork and honest engagement. Audit PlanningContribute to the development of the annual risk-based audit plan, including scoping proposed engagements and estimating resourcing. Flag emerging risks identified during fieldwork for inclusion in future audit cycles or escalation to the Head of Internal Audit & Risk. Follow-Up & Continuous ImprovementTrack closure of agreed management actions, escalating overdue or inadequately remediated items. Support development of audit methodology, templates, and standards as the function matures. Mentor and provide on-the-job guidance to junior audit team members where applicable. Organisation StructureReports to Head of Internal Audit & RiskExperience, Skills & QualificationsEducationDegree in a business-related field, IT, Business Information Systems, or a related technical/business field from a recognised university. Professional certification required: one of Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), or ACCA (or equivalent, e.g. CPA). Additional certifications (e.g. CISM) are an added advantage. ExperienceMinimum of 7+ years' audit experience, including prior experience at a Big Four (or equivalent top-tier external audit) firm this is a requirement of the role, not merely an advantage. Demonstrated track record of leading audits independently from planning through to reporting and follow-up, ideally spanning both business process and technology-related audits. SkillsStrong technical audit execution skills testing design, sampling, evidence evaluation, and root-cause analysis. Confident, articulate communicator able to present and defend findings to management under scrutiny. Sound working knowledge of risk management principles and control frameworks. Strong personal organisation able to manage multiple concurrent engagements and deadlines with minimal supervision. Ability to maintain the highest levels of integrity, confidentiality, and objectivity. Comfortable operating across multiple markets and cultures, with willingness to travel. Why M-KOPA?At M-KOPA, we empower our people to own their careers through diverse development programs, coaching partnerships, and on-the-job training. We support individual journeys with family-friendly policies, prioritize well-being, and embrace flexibility.Join us in shaping the future of M-KOPA as we grow together. Explore more at m-kopa.com.Recognized four times by the Financial Times as one Africa's fastest growing companies (2022, 2023, 2024, 2025 and 2026), named on CNBC's World’s Top Fintech Companies 2025 & 2026 and by TIME100 Most influential companies in the world 2023 and 2024 , we've served over 10 million customers, unlocking $2 billion in cumulative credit for the everyday earners across Africa, in addition to over 10,000 e-bikes financed in Kenya.Important NoticeM-KOPA is an equal opportunity and affirmative action employer committed to assembling a diverse, broadly trained staff. Women, minorities, and people with disabilities are strongly encouraged to apply.M-KOPA explicitly prohibits the use of Forced or Child Labour and respects the rights of its employees to agree to terms and conditions of employment voluntarily, without coercion, and freely terminate their employment on appropriate notice. M-KOPA shall ensure that its Employees are of legal working age and shall comply with local laws for youth employment or student work, such as internships or apprenticeships. M-KOPA does not collect/charge any money as a pre-employment or post-employment requirement. This means that we never ask for recruitment fees’, processing fees’, interview fees’, or any other kind of money in exchange for offer letters or interviews at any time during the hiring process.Applications for this position will be reviewed on a rolling basis. Shortlisting and interviews will take place at any stage during the recruitment process. We reserve the right to close the vacancy early if a suitable candidate is selected before the advertised closing date.If your application is successful M-KOPA undertakes pre-employment background checks as part of its recruitment process, these include; criminal records, identification verification, academic qualifications, employment dates and employer references.

23 days ago