S
OFFICER, INTERNAL AUDIT – SYSTEMS AND GENERAL AUDIT
SALAAM MICROFINANCE BANK
Nairobi 🇰🇪 Kenya
Posted about 5 hours ago (29 Oct 2026) Updated about 4 hours ago
Job Description
The internal audit officer will plan and execute risk‑based audits of systems, operations, financial processes and compliance across the bank, focusing on IT and general controls. They will evaluate controls, prepare audit reports with recommendations, and monitor the implementation of corrective actions. The role requires strong audit expertise, knowledge of IT systems and regulatory guidelines, and the ability to communicate findings to senior management.
Qualifications & Requirements
- • Relevant tertiary qualification (e.g., Bachelor’s Degree in Accounting, Finance, Information Systems or related field)
- • Proven experience in internal audit, preferably with a focus on IT and systems auditing
- • Strong understanding of risk‑based audit methodology and regulatory requirements such as CBK guidelines
- • Knowledge of IT general controls, application controls, cybersecurity and data protection standards
- • Ability to analyse system‑generated reports, identify anomalies and assess control effectiveness
- • Excellent written and verbal communication skills for reporting to senior management
Required Skills
Responsibilities
- • Plan and conduct risk‑based systems, operational, financial, branch and compliance audits in line with the internal audit plan
- • Prepare audit programmes, testing procedures and determine audit scope for IT infrastructure, applications and data processes
- • Evaluate general and application controls, including user access, segregation of duties and transaction processing
- • Review controls over core banking, digital platforms, system interfaces, data integrity and audit trails
- • Assess cybersecurity measures, patch management, vulnerability handling and incident response
- • Examine system development, change management, testing and implementation processes
- • Evaluate IT operations, backups, disaster recovery, business continuity and third‑party services
- • Test the design and operating effectiveness of internal controls through document review, transaction testing and staff interviews
- • Prepare clear audit reports identifying weaknesses, risks, root causes and practical recommendations
- • Follow up on management action plans and verify corrective actions