Head of Systems Audit Division (1 position)

JOB PURPOSE:

To schedule, plan, conduct and coordinate audit and investigation assignments in the Bank IT infrastructure. Monitors control systems, which ensure the integrity and security of data and reviews the Bank’s computing and networking environment and usage of computer facilities. Reviews application systems and associated procedures to ensure that they meet desired objectives in a timely & efficient manner.

DUTIES AND RESPONSIBILITIES:

• Oversee audit tasks as per the annual work plan, ensuring they are completed within the timeframe and in accordance with internal audit policies and applicable standards.
• Review divisional work-plans, IT risk assessments, budget proposals, and Conduct Level 2 reviews of draft IT audit reports
• Oversee vulnerability and penetration testing on information systems and IT infrastructure.
• Examine and evaluate the adequacy and effectiveness of information systems, the related business controls and develop appropriate audit programs in the assigned areas.
• Evaluate the adequacy of security and processing controls in each audit, including the effective-ness of general computer controls and the IT environment.
• Review the computing environment, system software, system development, security procedures, and internal control procedures for systems under development or enhancements.
• Conduct compliance reviews of the Bank’s IT environment and follow up on the implementation of internal and external IT audit recommendations.
• Coordinate the activities of the Audit Departmental Risk Committee and monitor operations of the IT forensic lab.
• Oversee the automation of audit processes and upgrades of ComputerAssisted Audit Techniques (CAATS).
• Any other duties as assigned by the supervisors.

EXPECTED OUTPUTS

Expected outputs/ Deliverables

• Draft IT Risk assessment
• Divisional Workplan
• Draft IT Audit Programs
• IT Audit workpapers
• Draft IT Audit Reports
• Draft IT Investigation reports
• Divisional Budget Proposals
• Departmental Risk Register

PERSON SPECIFICATION

MINIMUM QUALIFICATIONS

• First class or second class upper - Bachelor’s degree in information technology, Information Systems Management, Computer science or closely related degree from a recognized institution.
• Full membership of ISACA is mandatory. Professional certification in any other area: CGEIT, IIA, Certified Data Privacy Solution Engineer (CDPSE) areman added advantage.
• A Master’s degree in any of the above-mentioned fields.

EXPERIENCE

• At least eight (8) years’ work experience with a minimum of three (3) years in Audit practice, at Senior Management level with a reputable organisation.

AGE:

• 35-50 YEARS.

COMPETENCIES

i) Technical skills

• Must be knowledgeable in any of the following standards: COBIT, ITIL and ISO
• Strong quantitative, analytical, and technical skills
• Strong computer skills including proficiency in computer-aided audit techniques (CAATs) audit management software.
• Thorough knowledge of auditing standards, technology/security focused regulations, IT general controls and application controls.
• Understanding of IT Governance and IT Risk Management concepts.
• Knowledge of information technology and similar industry frameworks
• Knowledge of Project Management
• Knowledge of business process analysis
• Report-writing, presentation skills
• Leadership skills

ii) Behavioral skills

• Customer Focused
• Collaborative
• Ethical with a high level of Integrity
• Independent and Objective
• Effective Communication skills
• Team Player with excellent interpersonal Skills, Action and Result Oriented

Salary and Benefits for the position are generous and attractive.

The online applications should be accompanied by:

1) A copy of the National Identity Card (Front and Back).

2) A copy of Academic documents as indicated in the job description.

3) A duly registered Statutory Declaration for applicants with differing Dates of Birth or Names across any of the required documents.

4) A letter of equivalence from the National Council of Higher Education for applicants whose first degree was obtained from a foreign university.

Please ensure that all required documents are duly attached.

Applications should be submitted by filling out the online application link which is available under the careers section of the BOU Website (https://bou.or.ug/bouwebsite/Careers/). Please follow the link instructions as clearly as possible.

Management reserves the right to terminate applicants found with concealed or falsified information and academic credentials. Only shortlisted candidates will be contacted.

Applications should reach NOT later than 5:00PM Monday 4 November 2024