We are pleased to announce the vacancy, Senior Manager – Technology Audits and Audit Quality within our Internal Audit Function. In keeping with our current business needs, we are looking for a person who meets the criteria indicated below.
Reporting to the Director, Internal Audit, the role holder will be responsible for leading a team of technical specialists/experts responsible for developing and delivering an effective internal audit plan, assessing the key risks associated with Technology and providing practical recommendations to mitigate against the same. The role holder will also be responsible to the Director- Internal Audit for the planning and execution of risk-based IT audits of diverse systems that include business applications, billing systems, value added systems, ERP, and customer support systems and development and implementation of the audit automation program.
Responsibilities
Key accountabilities and decision ownership:
Information Systems Audits
- Manage the audit execution of audits IT systems. Ensure the audit jobs maintain thorough and high-quality results within defined audit plans and budgets.
- Planning, scoping, and co-ordinating audit delivery, and supporting reporting for all systems managed within IT operations
- Ensure adherence to Internal Audits policies, standards, procedures, and processes including appropriate documentation and quality assurance standards.
- Ensure engagements are conducted effectively and efficiently to the high standards set out by the Division, outcomes of which are confirmed through the Division’s Quality Assurance Program (QAIP)
- Provide practical and cost-effective advice to management on designing, implementing and enhancing internal controls in the areas of technology in Safaricom IT Operations Domain and lead the audit team members to deliver the same high-quality advice.
- Assess the following in relation to IT operations domain: Technology deployed, configuration, parameters & settings, access control, data protection standards, auditing techniques deployed
Audit Analytics/ Continuous Auditing and Controls Monitoring
- Driving the development, and use of data analytics throughout the audit life cycle, as well as manage the network of data analytics auditors embedded in the internal audit teams. This will be done through increasing the number of auditors who are proficient in performing basic analytics.
- Rollout the continuous auditing and controls monitoring program in the company and raise awareness of the same within the business
- Working with internal audit, risk management and business process owners to identify key automated controls, developing a roadmap to ensure tests are developed to monitor key with a long term objective of reducing audit turnaround time and proactive monitoring of high risk areas in the company
- Ensure all high-risk issues identified and closed within expected timelines, thus minimizing the period exposure to the company
Revenue Assurance Audit
- Review of Revenue Assurance governance framework and Revenue Assurance processes
- Review operational effectiveness of Revenue Assurance controls across revenue streams through re-performance of key Revenue Assurance activities
- Assessment of value assurance provided by Revenue Assurance and implementation of Revenue Assurance system.
Risk Assessment
- Participate in Internal Audit risk assessments
- Present an audit opinion on the status of information risk to Director, Internal Audit
Audit Recommendation Implementation
- Track implementation status of audit recommendations. Maintain partnership with clients to ensure that all audit issues are resolved within the defined target dates.
- Hold follow-up meetings with auditees to discuss status of issue implementation.
Project Assurance
- Assist the Project assurance team as an independent internal assurance function to provide advice and guidance to the project management team and to report on a regular basis to the Project steering committee
- Evaluate project documentation e.g. project plans, project initiation documents, business case to identify potential risks and areas of improvement.
- Proactive identification of controls. Ensure that User Acceptance Tests provided address all risks identified in the risk assessment
Quality assurance – Audit QAIP program Responsible for the internal audit quality assurance and improvement program (QAIP) program
- Maintaining a timely and effective internal quality assurance program that continuously validates conformance of internal audit practices to the internal audit standards;
- Executing the quality assurance process to ensure that all internal audit work is completed as per internal policies and procedures and identifying areas of non-compliance with standards and policies & procedures.
- Identifying and documenting completed audit work for each quarter, selecting samples for quality assurance, both peer and external reviews and preparing QAIP Executive Summary Reports to incorporate all completed activities
- Identifying training opportunities through quality assurance review, recommending training needs to align with internal audit practices and support the delivery of focused training sessions for matters identified.
- Providing timely on-going support to the DIA including answering inquiries and provide guidance regarding Methodology to audit staff;
- Recommending changes to audit methodology and practices based on the findings and results of the quality assurance work.
- Providing ongoing and periodic statistical reporting on quality assurance reviews to the internal audit department’s management team.
People Management
- Define the IT Audit objectives and complete the staff appraisal reports per engagement/mid-year and end year appraisals
- Provide coaching to IT Auditors in all audits
- Coordinate appropriate development programs for the IT Audit team members
Administrative
- Assist the Audit operations lead in staffing audits and determining the skills required for technical audits
Qualifications
Must have technical / professional qualifications:
• Degree in Computer Science, IT, Business Information Systems (or related technical / business field) from a recognized university.
• Good knowledge of key IT applications supporting core business processes and business assurance
• Holder of Certified Information Systems Auditor (CISA) Designation
• Other qualifications e.g., CISM, CISSP, CRISC would be an added advantage
• 8 years IT Audit experience within an internal audit function or a reputable external audit firm
• A history of leading teams of auditors in successfully delivering IT audit engagements, either from an internal audit or external advisory capacity
• At least 2 years formal people management experience
• Experience in at least 3 of the following platforms Unix, Linux, Windows Server, Ms Sql, Oracle
• Familiarity with ERP and GRC tools
• Data analytics qualifications and experience
• Well versed in knowledge of IT control frameworks e.g. COBIT, ISO 27002, PCI DSS, ITIL
• Reliable, proven ability to self-start and effectively manage a project team
How to apply
If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to update your candidate profile on the recruitment portal and then Click on the apply button. Remember to attach your resume only.
Female and Persons with Disability candidates are highly encouraged to apply.
Required Skills
Audit ReportingRisk AssessmentTeam Audit Coordination
About Us
We are the leading telecommunication company in East Africa. Our purpose is to transform lives by connecting people to people, people to opportunities and people to information. We keep over 42 million customers connected and play a critical role in the society, supporting over one million jobs both directly and indirectly while our total economic value was estimated at KES 362 Billion ($ 3.2 billion) for the 12 months through March 2021. We are listed on the Nairobi Securities Exchange (NSE) and with annual revenues of close to KES 298 Billion ($2.5 billion) as at March 2022. We were founded in 1997 as a fully owned subsidiary of Telkom Kenya before a 40 percent acquisition by Vodafone Group PLC in May 2000, and a public offering of 25 percent shares through the NSE in 2008. Under the management of Vodafone Group PLC, we welcomed Michael Joseph, as our first CEO, a few months later in July of 2000. He led the company’s growth to accommodate 16.71 million subscribers from the previous 20,000, largely owing to innovative products like M-PESA in 2007.
