Information System Auditor

Job Purpose

• This position is responsible for providing independent assurance on GA Insurance Limited’s information systems, by ensuring that the risk management, governance processes, and controls that are in place are adequate to always safeguard the information systems of the Company.

Key Responsibilities

• Participate in the development, implementation, and monitoring of the annual information systems internal audit plan.
• Perform assessments of all the business information systems to evaluate the adequacy of controls, effectiveness, and efficiency to support business processes.
• Evaluate the adequacy and effectiveness of controls for information systems and technology processes, including those related to data protection, change management, and cyber security.
• Perform compliance assessments of information systems processes against industry frameworks, regulations, and standards such as the National Institute of Standards and Technology framework (NIST), International Organization for Standardization (ISO), Payment Card Industry Data Security Standard (PCI DSS), and the Data Privacy & Protection Act.
• Communicate audit results and recommendations to key stakeholders including management and business process owners.
• Collaborate with the Technology Services and IT security teams to ensure that appropriate controls are in place to function effectively.
• Update emerging changes and security risks and threats in the information systems landscape and provide relevant and timely advice to stakeholders where necessary.
• Review the IT governance documents, strategies, policies, contracts, and procedure documents.
• Provide advice in resolving information security incidents.
• Participate in ensuring quality in all work delivered including meeting the standards for working papers and supporting the implementation of audit findings’ recommendations, and conclusions.
• Provide support in drafting suitable audit reports highlighting key control weaknesses as well as non-compliance with procedures, policies, and regulatory requirements.
• Participate in the preparation of the Board Audit Committee files.
• Provide internal audit services for GA Insurance subsidiaries namely GA Life, GA Uganda and GA Tanzania.

Qualifications and Experience

• Education: A bachelor’s degree in accounting, Finance, Commerce, Economics, IT or a related field
• Professional Certification: Qualification in information systems audit such as Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Security Manager (CISM) or Certified Internal Auditor (CIA) is an added advantage
• Experience: Minimum of 3 years in motor claims- general insurance.

Technical & Behavioral Competencies

• Strong foundation in internal audit standards and practices, including audit procedures, risk management, information systems governance and security, CAATs, project management, report writing, and the ability to evaluate business processes and technology environments.
• Results-driven and detail-oriented professional with strong analytical, problem-solving, customer service, and collaboration skills, demonstrating integrity, emotional intelligence, agility in managing competing priorities, and the ability to work both independently and within teams.