IT Audit & Assurance Manager at Equity Bank Kenya

Job Description

The Senior Manager IT Audit & Assurance is responsible for supporting and coordinating in the development and execution of IT Audit strategies that assess the effectiveness, security and compliance of an organizations IT systems and processes.

He/she will develop, implement, and continuously oversight technology audit, risk management, compliance initiatives, policy development, and internal control assessments.

Job Responsibilities/ Accountabilities: 

Define and refine IT Governance, Risk, and Compliance (GRC) policies, procedures, and standards across key IT areas such as Change Management, Access Controls, and Cybersecurity.
Planning and conducting IT Audits and internal control self-assessments to evaluate internal controls, risk management practices and adherence to regulatory requirements.
Collaborate with various departments to identify areas for improvement, provide actionable recommendations, and follow through on implementation of controls to enhance the overall security and efficiency of IT Operations.
Provide guidance and support to IT teams in the implementation of governance processes and controls.
Managing and supporting the coordination of audit teams both internal and external and ensuring effective execution of audit and advisory assessments and timely provision of management actions, timelines for remediation.
Prepare comprehensive reports for senior management and stakeholders on the status of IT governance, risk, and compliance initiatives
Key advisor on IT Risk and compliance matters between business and technology teams. Act as a key liaison for all IT and IS audit and risk assessment engagements
Escalate critical control deficiencies to senior management and relevant stakeholders in a timely manner.
Collaborate with IT and business teams to develop remediation plans that are practical and sustainable.
Foster a culture of continuous improvement within the organization and alignment between Risk, Compliance, Internal Control and Technology teams.
Keep up-to-date with regulations and prudential guidelines affecting IT and IS, continuously updating policies, standards, and procedures
Provide assurance to senior management that IT change activities support business control objectives while adhering to governance and compliance standards.

Qualifications
Knowledge and Experience 

Bachelor’s or Master’s degree in Information Technology, Computer Science, or a related field.
Hold relevant industry certifications (e.g., CISM, CRISC, CGEIT, CISA)
Minimum 10 years of experience in Information Technology with at least 8 years of work experience in governance, audit, compliance, risk, and/or security
Previous experience of working with Internal Audit on drafting management responses and closing audit findings
Expansive knowledge of technology controls in various IT environments. Experience in financial services sector an added advantage.
Working familiarity with Agile product management methodologies such as Scrum/Kanban

Key Critical Competencies & Skills 

Excellent in preparation of reports, dashboards and documentation
Strong understanding of Legal, Risk, Compliance, and Cybersecurity concerns
Strong analytical and problem-solving skills.
Excellent communication, interpersonal, and presentation skills.
Ability to work effectively with cross-functional teams.
Proficiency in analysis and presentations skills using MS Excel, MS Word and MS PowerPoint.