The Nyeri National Polytechnic seeks to recruit interested, dedicated and qualified candidate to fill the System Internal Auditor position in the Internal Audit Department. The successful candidate will evaluate, test and strengthen the Polytechnic•s Information Technology (IT) governance. application systems, data integrity, cybersecurity controls and general IT controls (ITGCs).
Duties and Responsibilities
Conducting comprehensive audits of core business applications, databases, operating systems and network infrastructure to evaluate system reliability, data integrity and security controls.
Reviewing and testing access management. change management. backup/disaster recovery and computer operations across alt polytechnic's departments.
Planning. executing and documenting audit fieldwork in accordance with Institute of Internal Auditors (IIA) standards.
Drafting clear, concise and objective audit reports highlighting system vulnerabilities. risks, root causes and practical management recommendations.
Assisting in technical investigations regarding system misuse, data breaches or automated process failures.
Ensuring institution-wide compliance with internal ICT policies. standard operating procedures and relevant regulatory standards (e.g. Data Protection Act. Computer
Misuse and Cybercrimes Act).
Tracking and verifying the implementation of management action plans addressing previously identified IT audit findihgs.
Performing any other relevant duties as may be assigned by the Head of Internal Audit or Audit Committee.
Qualifications and Competencies
Be a holder of a bachelor's degree in Computer Science or IT related field from a recognized university.
Should have a minimum of four. (4) years of active experience in IT audit, system administration or cybersecurity assessment.
Experience in public sectot or learning institution.
Should possess professional qualification in Certified Information Systems Auditor currently pursUing).
Registration with a relevant professionai body, Institute of Internal Auditors (IIÄ) is an added advantage.
Key Competencies
Strong knowledge of IT systems, cybersecurity and internal controls.
Excellent analytical and problem-solving skills.
Strong communication and report writing skills.
High integrity and professional independence.
Ability to work under minimal supervision and meet deadlines.