3 Officers, Information Systems Audit

Internal Audit
2. JOB REF :  IA4.05
4. RANK :  SBOII
5. REPORTS TO :  Team Leader, Information Systems Audit
6. SUPERVISES :  None

7.PURPOSE
To conduct audits and investigations across the Bank’s IT environment by evaluating the effectiveness of information systems, infrastructure, and related processes, with the aim of assessing internal controls, identifying vulnerabilities, and ensuring robust IT governance, security, and compliance with regulatory and Bank policies.
8.DUTIES AND RESPONSIBILITIES
• Identify, assess and document risks and controls in the I.T Auditable areas assigned.
• Perform and document process walkthroughs and, draft audit procedures in assigned I.T auditable areas.
• Develop draft audit work programs in the assigned areas.
• Perform audit tests of the assigned auditable areas in line with the Bank’s Internal Audit methodology.
• Review the economy, efficiency, and effectiveness to ascertain value for money in the deployment of Bank resources and provide advisory on assigned areas.
• Obtain sufficient and appropriate audit evidence addressing the relevant audit objectives.
• Document the results of the audit work in line with internal audit methodology.
• Prepare draft audit reports for the assigned audits.
• Conduct the follow-up of previous audit recommendations to ascertain the extent of implementation.
• Take part in Audit spot checks for cash holding areas.
• Conduct training, mentoring, monitoring, and evaluation of performance for BOI/II.
• Maintain the IT Audit Lab equipment and the wireless network, Design tests for continuous control monitoring on ACL Robotics.
• Perform any other duties as may be assigned by audit management.

9. EXPECTED OUTPUTS
• Audit programs /Investigation plans.
• Process documentation
• Tested systems and controls.
• Audit work papers.
• Draft audit reports.
• Continuous monitoring reports from systems

10. PERSON SPECIFICATIONS
A.  Qualifications 
• First Class or Second-Class Upper Bachelor’s degree in Computer Science, Information Technology, Information Systems, or Cybersecurity from a recognized institution.
• Must possess any of the following professional qualifications: CISA, CGEIT, CDPSE, CISM, CEH, CHFI, ISO270001.
• A master’s degree in any of the aforementioned fields is an added advantage.
• Membership of the Information Systems Audit and Control Association (ISACA) and /or Institute of Internal Auditors (IIA) is an added advantage.
B.  Experience 
• A minimum of at least Five (5) years of relevant working experience in IT Audit and/or IT security related field.
C. Age
• 30.0 to 37.0 years.
D. Competencies
 Technical Competencies
• Working knowledge of I.T industry frameworks, regulations and best practice.
• Ability to use Computer Aided Audit techniques (CAATs) e.g., ACL and Teammate.
• Planning and organizational skills.
• Analytical and problem-solving skills.
• Strong report writing and presentation skills.
• Proficiency in developing scripts using SQL.
• Ability to supervise others.

Behavioural Competencies
• Integrity.
• Independent and objective.
• Team player.
• Good communication and interpersonal skills.
• Leadership skills.
• Emotional intelligence.