i. Perform audit activities to ascertain efficiency and effectiveness of the implemented Governance, Controls and Risk Management processes;

ii. Design appropriate audit procedures to execute the approved annual audit plan of the Authority, especially on IT audit engagements; 

iii. Perform audit of ICT systems to ascertain  effectiveness and efficiency of the designed and implemented general and application controls;

iv. Prepare Draft Audit Reports and for respective audit engagement;

v. Participate in preparation of annual risk based audit plan in consideration of the results of the strategic and operational risks assessments;

vi. Participate in determining audit scope and respective engagement objectives and developing audit work programs;

vii. Undertake follow up audit regarding adequacy and timeliness of the implemented corrective action by Management regarding previous audit issues;

viii. Maintain audit findings memoranda and appropriate working papers to ensure that adequate documentation exists to support the completed audit and conclusions;

ix. Research on emerging issues and trends in ICTto advice on future audit areas.

a. Minimum of Bachelor’s Degree in Information Technology, Computer Science, Computer Engineering or equivalent degree from a recognized institution.

b. Knowledge in Information Technology Risk Management/Governance.

c. Conversant with internal control frameworks/standards such as COSO/COBIT/ ISO/IEC 27000 etc.

d. Knowledge of multiple technology domains including software development, Security, database management, networking, and Operating systems (including UNIX/Linux, Ms Windows, Android, and IOS) is preferred.

e. Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.

f. A working knowledge and experience with using Computer Assisted Audit Techniques (CAATs) technologies and analytics to evaluate controls by examining relevant data.

g. Possession of recognized auditing/information system certifications such as CIA, CISA, CISM, CISSP, CEH etc will be an added advantage.

h. Knowledge of accounting and/or auditing is an added advantage.