Assistant Manager, Information Systems Audit

I&M Bank

I&M Bank is a wholly owned subsidiary of I&M Holdings Limited, a publicly quoted company at the Nairobi Securities Exchange (NSE). The bank possesses a rich heritage in banking.

Sector
Banking
Rate this employer
Average: 2.8 (6 votes)

https://www.imbankgroup.com/ke

Assistant Manager, Information Systems Audit

Job Description

  • The role holder is responsible for providing independent assurance on the governance, risk management, and control (GRC) processes related to information technology, including general and application controls, data integrity, confidentiality, availability, and system security.

Roles & Responsibilities

  • Participate and contribute to assessment of risk for target audit areas within the IS space as guided by the Manager, IS Audit.
  • Formulate engagement audit plans, prepare planning documents and ensure alignment of objectives, scope, methodology, and IT risk considerations in collaboration with the Manager, Information Systems Audit.
  • Develop engagement audit tests.
  • Execute audit procedures in alignment with IS audit objectives to ensure effectiveness and efficiency in assessing the design and operating effectiveness of controls.
  • Document complete and accurate audit evidence and working papers to support audit conclusions and recommendations.
  • Identify and document control weaknesses and associated risks for inclusion in audit reports, ensuring appropriate escalation to relevant stakeholders.
  • Lead assigned IS audit engagements, ensuring timely execution of audit procedures, monitoring progress against the approved plan, and identifying opportunities to enhance processes and strengthen controls.
  • Continuously evaluate audit objectives, test procedures, and risk coverage to ensure comprehensive coverage of the technology environment.
  • Engage with audit clients to validate root causes and ensure proposed management actions are appropriate and actionable.
  • Support special audits involving Information systems as assigned.
  • Review the governance, risk management, and control environment across IT development projects, DevOps practices, and software engineering workflows, including SDLC processes, CI/CD pipelines, environment management, and agile delivery models.

Job Specifications

Academic & Professional Qualifications:

  • Bachelor’s in Information Systems / Computer Science / IT / Business-related field, or equivalent. 
  • Certified Information Systems Auditor (CISA) – required.
  • One (1) of: CISM/ CRISC/ CGEIT /CIA /ISO/IEC 27001 Lead Auditor or Implementer/ CISSP/ CIAQA / CCNA/ CPA /CEH / CHFI (added advantage).
  • Membership Affiliations: Information Systems Audit and Control Association (ISACA).

Work Experience Required:

  • Over five (5) years in a similar role in a similar-sized organization.

Competencies:

  • High standards of ethics and integrity
  • Sound judgment for risk-based audit planning, scoping, and prioritization
  • Strong commercial awareness to align audit outcomes with business objectives.
  •  Banking Knowledge
  • Comprehensive risk knowledge across IT and operational domains
  • Experience in reviewing DevOps and IT engineering processes, including CI/CD pipelines and agile practices.

Last date to apply  2 Nov 2026

Method of application

If you are interested and qualified, kindly submit your application via the link provided below,

https://imbank.myadrenalin.com/CANDMICROSITE/#/?utm_source=Jobinkenya

 

Apply
Click on the APPLY button to send your application documents:
  • Your application will be sent to the employer immediately (Allowed formats: .doc .pdf .txt .docx)
  • A confirmation email will be sent to you few minutes afterwards
  • You can request any documents archived from our website (ex: a job description, a CV, a cover letter...)
Please bear in mind that you should never be requested to pay to get interviews, or to pass extra certifications etc...