Audit and Compliance Officer

Role Overview

This fixed-term position gives you responsibility for building and running a risk-based internal audit and compliance function across the entire Institute, including all departments, projects, and country offices. You will act as an independent assurance provider to AFIDEP leadership and the Board, checking that financial reporting, donor rules, statutory obligations, and internal policies are being met consistently. In practice, you will spend your time planning and performing audits, evaluating controls, reviewing financial and operational data, preparing clear reports with recommendations, and helping staff understand and adopt stronger accountability practices.

Key Responsibilities

• Develop and maintain an annual, risk-informed audit plan, secure Board Audit Committee approval, and adjust the plan as organisational risks evolve.
• Lead internal audits in line with recognised professional standards, documenting findings, identifying root causes, and agreeing corrective actions with management.
• Track the implementation of audit recommendations, flagging overdue or high-risk items to the Board Audit Committee and escalating where necessary.
• Review financial records and transactions for conformity with IFRS, AFIDEP’s financial policies, and statutory requirements across Kenya, Malawi, and other registration jurisdictions.
• Assess compliance with donor conditions across a multi-donor portfolio, verifying that spending, reporting, and documentation satisfy bilateral, multilateral, and private foundation requirements.
• Evaluate internal controls and business processes to identify weaknesses, prevent fraud, and improve operational efficiency while safeguarding institutional assets.
• Maintain the institutional risk register using recognised frameworks, coordinate risk mitigation actions, and support investigations into suspected irregularities.
• Review financial systems, ERP access controls, and IT general controls to confirm data integrity and security, while also delivering practical training to build staff capability in compliance and internal control.

Requirements & Qualifications

• A Master’s degree in Finance, Accounting, Business Administration, or a closely related discipline.
• A full, current professional certification such as CPA, ACCA, or CIA; a Certified Internal Auditor designation is strongly preferred for this role.
• At least eight years of progressive experience in internal audit, financial management, or compliance, including a minimum of five years within an international NGO, research institution, or development organisation operating in a multi-donor setting.
• Demonstrated knowledge of donor financial requirements and proven ability to work with complex funding portfolios from government, multilateral, and private foundation sources.
• Practical understanding of statutory and regulatory obligations in Kenya and/or Malawi, including NGO governance, tax compliance, and financial reporting duties.
• Hands-on experience designing and managing financial control systems or audit software within multi-project environments, with proficiency in ERP systems and advanced Excel.
• Familiarity with risk management frameworks such as COSO or ISO 31000, and experience maintaining an institutional risk register.
• Working knowledge of the IIA International Professional Practices Framework or other recognised internal audit standards.
• Desirable: experience in IT general controls reviews, ERP access audits, cybersecurity compliance checks, grants management platforms, or compliance oversight across multiple country offices.