Trusted listing
Information Systems Auditor
Jubilee Insurance
Nairobi, Kenya
Permanent
Published 2 months ago · Expires 4 weeks from now
Job description
An exciting opportunity has arisen for a motivated professional.
Job Ref. No: JLIL373
Role Purpose
The Information Systems Auditor is responsible for executing IT and internal audit assignments across Jubilee Insurance and, where necessary, regional entities. The role evaluates IT controls, cybersecurity practices, information system processes, and technology-enabled business operations to determine whether controls are effective and risks are adequately mitigated. The auditor provides independent assurance to Management and the Audit Committee and supports strengthening of the Company’s governance, risk, and control environment.
Key Responsibilities:
Strategy
- Provide insights and analysis to support strategic decision-making related to IT risk management, cybersecurity, and internal controls.
- Identify opportunities to optimize technology-enabled processes and improve the efficiency of IT controls.
- Assess IT governance practices and recommend enhancements aligned with industry standards and regulatory requirements.
- Evaluate performance of IT functions and provide feedback to improve strategic alignment and operational effectiveness.
- Plan and Execute IT Audits:
- Develop risk-based IT audit plans and programs.
- Conduct fieldwork, gather evidence, and document audit findings.
- Evaluate IT general controls (ITGC), application controls, cybersecurity controls, and infrastructure security.
- IT Risk Assessment:
- Identify risks in IT systems, networks, applications, and technology-enabled processes.
- Assess potential impacts on data integrity, financial reporting, operations, and compliance.
- Recommend risk mitigation measures to relevant stakeholders.
- Compliance & Regulatory Review:
- Ensure compliance with IT laws, cybersecurity regulations, and industry standards.
- Monitor changes in IT and cybersecurity requirements and assess their impact.
- Advise management on technology-related compliance risks.
- Financial & System Data Analysis:
- Review system-generated financial data and transaction trails for accuracy and completeness.
- Identify anomalies, irregularities, and potential internal control weaknesses.
- Process Improvement:
- Recommend enhancements to IT processes, system controls, and internal procedures.
- Support continuous improvement initiatives to strengthen the control environment.
- Ensure all audit assignments comply with internal audit standards, Company policies, and regulatory requirements.
- Promote strong IT governance, cybersecurity a...