Information System Auditor

Role Overview

This position supports an organisation in Nairobi County by independently assessing the reliability and security of its information systems and related technology controls. As a part-time Information System Auditor, you will split your time between remote work and occasional on-site collaboration, carrying out planned audit reviews, testing system safeguards, and identifying gaps that could expose the organisation to operational or compliance issues. Your work directly strengthens data integrity, supports regulatory alignment, and helps the business respond to a constantly shifting technology risk landscape.

Key Responsibilities

• Design and execute audits of IT systems, including server infrastructure, business applications, user access controls, and change management processes, using a risk-based approach.
• Examine security configurations, authentication mechanisms, data backups, and incident response arrangements to determine whether protections match organisational policy and external regulations.
• Review logs, operational documentation, system settings, and stakeholder input to test whether controls are working as intended and to uncover hidden weaknesses.
• Produce detailed work papers and structured audit reports that clearly explain findings, assign risk levels, and recommend practical corrective measures.
• Engage with IT specialists and business process owners to validate risks, discuss feasible remediation actions, and coordinate timelines for fixing identified issues.
• Conduct follow-up audits or verification checks to confirm that agreed improvements have been implemented and are effective.
• Stay alert to emerging technology exposures, such as cloud adoption, vendor-managed services, and new software implementations, and suggest updates to the audit agenda when necessary.
• Help refine internal audit methods, templates, and standards so future engagements become more consistent and more valuable to the organisation.

Requirements & Qualifications

• Proven hands-on experience planning and completing IT audits or information system audits, with a solid understanding of risk assessment and control evaluation.
• Familiarity with common technology platforms, network concepts, databases, operating systems, and information security principles.
• Strong analytical thinking, including the ability to interpret complex technical findings, identify underlying causes, and recommend realistic, cost-effective controls.
• A degree or equivalent qualification in information technology, computer science, information systems, or another technology-related field.
• Certification such as CISA, CIA, or a comparable audit or security credential is an added advantage.
• Excellent communication skills, with the confidence to present audit conclusions clearly to both technical teams and non-technical managers in English.
• A proven record of personal integrity, precise documentation, and careful handling of confidential information.
• Self-motivation and organisational discipline to manage a part-time workload independently while staying responsive and accessible during collaborative sessions.

What We Offer / Why Join

• A part-time, hybrid working model based in Nairobi County, providing genuine flexibility to work from home while maintaining meaningful engagement with the audit team and stakeholders.
• An opportunity to deepen your expertise in information systems auditing, risk management, and emerging technology oversight while contributing to real improvements in how the organisation protects its data and systems.