Kenya Civil Aviation Authority (KCAA) was established on 24th October 2002 by the Civil Aviation (Amendment) Act, 2002 with the primary functions towards; Regulation and oversight of Aviation Safety & Security; Economic regulation of Air Services and development of Civil Aviation; Provision of Air Navigation Services, and Training of Aviation personnel KCAA; as guided by the provisions of the convention on international civil aviation, related ICAO Standards and Recommended Practices (SARPs), the Kenya Civil Aviation Act, 2013 and the civil aviation regulations.

SENIOR INTERNAL AUDITOR – INFORMATION SYSTEMS – KCAA SCALE 6 – (REF: IAD/05/24) – 1 POST

Responsibilities

• Participation in the formulation, implementation, and monitoring of Internal Audit Strategic Plan and Annual Plans.
• Participating in the execution of multiple audit projects to achieve the scope, timing, and objectives of each assignment while ensuring applicable regulatory guidance is included in scope for assigned audits.
• Developing, documents, and updating audit procedures for audited departments in compliance with International Standards for the Professional Practice of Internal Auditing (Standards).
• Providing assurance to ensure that access to electronically stored and processed Authority information is adequately protected and managed.
• Testing adequacy and effectiveness of Information Systems control measures and recommend corrective action to be undertaken in areas of weakness.
• Developing and improving procedures to enable the Internal Audit function to optimize the use of Computer Assisted Audit tools such as TeamMate+, ACL, IDEA, etc.
• Liaising with audit clients to ensure prompt implementation of corrective actions on prior audit findings.
• Providing advisory services to Management for enhanced service delivery and controls on various KCAA processes.
• Identifying areas of risks, fraud, or malpractice and participating in special audits conducted by the Department.
• Training and coaching staff to develop skills, knowledge, and expertise necessary for effective execution of the department’s services.

Person Specifications

• At least four (4) years’ work experience as Information Systems Auditor I with hands-on experience in information system audits or information system operations in a comparable organization.
• Bachelor’s degree in information systems, Computer Science, or its equivalent from a recognized university.
• Master’s degree in information systems, Computer Science, or its equivalent from a recognized university will be an added advantage.
• Valid Professional Certification in Information Systems (IT) Audit, Risk, and Security e.g. CISM, CISA, CRISC.
• Membership to a Professional body in good standing.
• Knowledge of International Standards for the Professional Practice of Internal Auditing.
• Knowledge and demonstrable experience in the use of Audit Management Systems and Analytic tools.
• Demonstrable knowledge in IT risk assessment and controls reviews, concepts, or methodologies.
• Excellent written, verbal communication, presentation, and interpersonal skills