Director, Internal Audit

Job Responsibilities

• Own the risk-based Annual Audit Plan — Develop, maintain, and report on a plan aligned to the bank's strategy and CBK supervisory priorities, covering all key risk areas, with quarterly progress updates to the Board Audit Committee.
• Deliver the annual audit opinion — Provide the Board Audit Committee and CEO with an evidence-based opinion on the adequacy and effectiveness of governance, risk management, and internal controls across the entire bank.
• Regulatory assurance, AML/CFT, and CBK engagement — Lead audit coverage of AML/CFT controls, KYC/CDD, and FRC obligations; manage CBK on-site examinations; and ensure all regulatory findings are responded to accurately and on time.
• Digital and technology audit oversight — Provide assurance on cybersecurity, digital banking, mobile money, agency banking, and third-party technology providers, leveraging data analytics to deepen audit coverage.
• Lead & develop the audit function — Build a high-performing team and drive continuous improvement across all audit activities

Other Requirements

• Educational qualifications — Bachelor's degree in Commerce, Finance, Accounting, or a relevant field as the minimum entry requirement. A Master's degree (MBA or Finance) is an advantage.
• Professional qualifications — CIA and/or CPA-K as essentials, with active ICPAK or IIA Kenya Chapter membership. CISA and CAMS are strongly desirable given the digital banking and AML/CFT audit demands of a Tier 2 bank.
• Senior audit leadership in a regulated bank — Minimum 12 years in internal audit, with at least 5 years at director or senior management level inside a CBK-regulated institution. Board Audit Committee and CBK engagement experience is mandatory.
• CBK regulatory mastery — Deep working knowledge of the Banking Act (Cap. 488), CBK Prudential Guidelines, POCAMLA, the Data Protection Act 2019, and the CBK Corporate Governance Guidelines — particularly the dual reporting line requirement for audit independence.
• Risk-based audit expertise across all risk types — Proven ability to plan and deliver audits spanning credit, operational, technology, liquidity, compliance, and AML/CFT risk, including hands-on experience with digital channels, mobile money, and agency banking.