{"id":3906542,"url":"https://alion.io/job/cic-insurance-group-internal-auditor-ict","title":"INTERNAL AUDITOR - ICT","company":{"id":2467372,"name":"CIC Insurance Group","domain":"cicinsurancegroup.com","url":"https://alion.io/company/cicinsurancegroup","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Finance","role_family":"Finance","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Nairobi, Kenya"],"countries":["KE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"Power BI","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-11-07T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-07T00:00:00Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"About Us\n\nCIC Insurance Group is a leading insurance and financial services organisation with more than five decades of experience helping individuals, families, and organizations achieve financial security.\n\nWe have grown into a dynamic Group offering life, general, micro insurance, asset management, and investment solutions, with operations in Kenya, Uganda, South Sudan, and Malawi, and are listed on the Nairobi Securities Exchange.\n\nOur tagline, “We Keep Our Word,” reflects our unwavering commitment to integrity, transparency, and delivering on our promises to our clients, partners, and communities.\n\nCIC Group is passionate about innovation, digital transformation, and inclusive insurance solutions that meet the evolving needs of cooperatives, SMEs, corporates, and individuals. By joining us, you will be part of a team that is shaping the future of financial protection across Africa.\n\nAbout the Role\n\nReporting to the Director Internal Audit, the role holder will provide independent and objective assurance and advisory services that strengthen governance, risk management and internal controls across assigned business units. The role supports delivery of the Internal Audit Strategy through risk-based auditing, data-driven assurance, continuous monitoring and practical recommendations that improve business performance and control effectiveness.\n\nKey Responsibilities\n\nExecute end-to-end risk-based ICT and technology audits in accordance with the approved Internal Audit Plan, Internal Audit methodology, professional standards, regulatory requirements and the organization’s ICT risk profile.\nParticipate in enterprise and ICT risk assessments and contribute to the development of the annual Internal Audit work plan, with consideration of emerging technology risks, cybersecurity threats and changes in the organization’s technology landscape.\nDevelop audit objectives, scope, risk and control matrices, audit programmes and testing strategies for assigned ICT audit engagements.\nConduct ICT audits covering IT governance, cybersecurity, information security, IT general controls, application controls, IT infrastructure, networks, databases, cloud services, system development, change management, access management, IT operations, data management, business continuity and disaster recovery, as applicable.\nAssess the design and operating effectiveness of IT General Controls (ITGCs), including logical and physical access controls, privileged access, segregation of duties, change management, backup and recovery, incident management and IT operations.\nReview controls over third-party and outsourced technology services, including vendor due diligence, contractual obligations, service-level agreements, information security requirements, performance monitoring, access to organizational data and exit arrangements.\nDevelop data-driven audit tests to identify unauthorized access, unusual user activity, segregation-of-duties conflicts, dormant accounts, duplicate transactions, system overrides, control breaches, anomalies and other indicators of technology or fraud risk.\nUse appropriate audit, data analytics and visualization tools, including advanced Excel, IDEA, Power BI, SQL and other relevant ICT audit or analytics tools, where applicable.\nContribute to the development and implementation of continuous auditing, continuous monitoring and automated control testing to improve audit efficiency, coverage and early identification of emerging technology risks.\n\nAudit Quality, Professional Standards and Independence\n\nPerform audit work in accordance with the Internal Audit Charter, approved methodology, policies and applicable professional standards.\nEnsure audit assignments are completed to required quality standards and within agreed timelines.\nMaintain complete, accurate and well-organized audit documentation to support review and quality assurance.\n\nStakeholder Engagement\n\nBuild effective working relationships with business and functional management while maintaining appropriate audit independence.\nCommunicate audit issues clearly and constructively to process owners and senior management.\n\nWho We’re Looking For\n\nEssential Knowledge/Skills and Experience Required:\n\nBachelor’s degree in a business-related field.\nCISA\nCPA/ACCA / CIA/ Computer Assisted Audit Techniques is desirable\nInsurance Professional Qualification is desirable\n3-5 years’ experience. At least 2 years’ experience in the big 4 audit firms or an organization similar in size or larger than CIC Group is an added advantage\nKnowledge of current technological developments/trends in area of expertise and knowledge of software requirements for audit of systems procedures\nBasic knowledge of regulations by AKI and IRA\nExcellent communication skills – written, oral, presentation and report writing\nAbility to maintain highest levels of integrity and objectivity\nFlexibility in mobility\n About Us\n\nCIC Insurance Group is a leading insurance and financial services organisation with more than five decades of experience helping individuals, families, and organizations achieve financial security.\n\nWe have grown into a dynamic Group offering life, general, micro insurance, asset management, and investment solutions, with operations in Kenya, Uganda, South Sudan, and Malawi, and are listed on the Nairobi Securities Exchange.\n\nOur tagline, “We Keep Our Word,” reflects our unwavering commitment to integrity, transparency, and delivering on our promises to our clients, partners, and communities.\n\nCIC Group is passionate about innovation, digital transformation, and inclusive insurance solutions that meet the evolving needs of cooperatives, SMEs, corporates, and individuals. By joining us, you will be part of a team that is shaping the future of financial protection across Africa.\n\nAbout the Role\n\nReporting to the Director Internal Audit, the role holder will provide independent and objective assurance and advisory services that strengthen governance, risk management and internal controls across assigned business units. The role supports delivery of the Internal Audit Strategy through risk-based auditing, data-driven assurance, continuous monitoring and practical recommendations that improve business performance and control effectiveness.\n\nKey Responsibilities\n\nExecute end-to-end risk-based ICT and technology audits in accordance with the approved Internal Audit Plan, Internal Audit methodology, professional standards, regulatory requirements and the organization’s ICT risk profile.\nParticipate in enterprise and ICT risk assessments and contribute to the development of the annual Internal Audit work plan, with consideration of emerging technology risks, cybersecurity threats and changes in the organization’s technology landscape.\nDevelop audit objectives, scope, risk and control matrices, audit programmes and testing strategies for assigned ICT audit engagements.\nConduct ICT audits covering IT governance, cybersecurity, information security, IT general controls, application controls, IT infrastructure, networks, databases, cloud services, system development, change management, access management, IT operations, data management, business continuity and disaster recovery, as applicable.\nAssess the design and operating effectiveness of IT General Controls (ITGCs), including logical and physical access controls, privileged access, segregation of duties, change management, backup and recovery, incident management and IT operations.\nReview controls over third-party and outsourced technology services, including vendor due diligence, contractual obligations, service-level agreements, information security requirements, performance monitoring, access to organizational data and exit arrangements.\nDevelop data-driven audit tests to identify unauthorized access, unusual user activity, segregation-of-duties conflicts, dormant accounts, duplicate transactions, system overrides, control breaches, anomalies and other indicators of technology or fraud risk.\nUse appropriate audit, data analytics and visualization tools, including advanced Excel, IDEA, Power BI, SQL and other relevant ICT audit or analytics tools, where applicable.\nContribute to the development and implementation of continuous auditing, continuous monitoring and automated control testing to improve audit efficiency, coverage and early identification of emerging technology risks.\n\nAudit Quality, Professional Standards and Independence\n\nPerform audit work in accordance with the Internal Audit Charter, approved methodology, policies and applicable professional standards.\nEnsure audit assignments are completed to required quality standards and within agreed timelines.\nMaintain complete, accurate and well-organized audit documentation to support review and quality assurance.\n\nStakeholder Engagement\n\nBuild effective working relationships with business and functional management while maintaining appropriate audit independence.\nCommunicate audit issues clearly and constructively to process owners and senior management.\n\nWho We’re Looking For\n\nEssential Knowledge/Skills and Experience Required:\n\nBachelor’s degree in a business-related field.\nCISA\nCPA/ACCA / CIA/ Computer Assisted Audit Techniques is desirable\nInsurance Professional Qualification is desirable\n3-5 years’ experience. At least 2 years’ experience in the big 4 audit firms or an organization similar in size or larger than CIC Group is an added advantage\nKnowledge of current technological developments/trends in area of expertise and knowledge of software requirements for audit of systems procedures\nBasic knowledge of regulations by AKI and IRA\nExcellent communication skills – written, oral, presentation and report writing\nAbility to maintain highest levels of integrity and objectivity\nFlexibility in mobility","description_format":"text","description_chars":9806,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Information Security","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-11-07T03:31:30Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.723,"p_room":0.788,"age_days":7,"expected_fill_days":8,"reasons":["seen:7","velocity","win:late"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/cic-insurance-group-internal-auditor-ict","json_url":"https://alion.io/job/cic-insurance-group-internal-auditor-ict.json","meta":{"generated_at":"2026-11-15T05:31:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":686,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2467372},"rest":"https://alion.io/mcp/rest/get_company?id=2467372"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcic-insurance-group-internal-auditor-ict"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcic-insurance-group-internal-auditor-ict"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcic-insurance-group-internal-auditor-ict"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cic-insurance-group-internal-auditor-ict\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcic-insurance-group-internal-auditor-ict"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3906542}},{"tool":"search_jobs","arguments":{"company":"cicinsurancegroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3906542},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}