Information Systems Auditor at NPF Microfinance Bank

NPF Microfinance Bank is recruiting a skilled candidate to fill the position below:

Job Title: Information Systems Auditor

Location: Lagos
Employment Type: Full-time

Overview of Position

• We are seeking a skilled Information Systems Auditor with 3 - 5 years of experience to join theirdynamic and growing team.
• The individual will be in charge of evaluating and assessing our organization’s information technology systems, processes, and controls to ensure that they comply with relevant regulatory, legal, and industry standards and that they operate effectively and efficiently.
• The role of the ideal candidate would not be limited to identifying potential vulnerabilities, risks, and weaknesses in IT systems by reviewing their design and implementation, but makes sure there is ongoing operations and maintenance.
• As needed, the individual gives management, stakeholders, and external regulators recommendations for improvements and remediation. The individual will possess a strong understanding of IT audit processes, risk management, and information security.

Responsibilities
Audit Planning and Execution:

• Plan and execute information systems audits to assess the effectiveness of controls, security measures, and compliance with relevant regulations and standards.
• Diligently keep a systematic check on the company’s spending to improve organizational efficiency
• Conduct and attend regular meetings with senior management to share financial findings.

Risk Assessment:

• Conduct risk assessments to identify and evaluate potential risks related to information systems.
• Develop strategies to mitigate identified risks and ensure the security and integrity of data.
• Identify areas of improvement

Compliance Monitoring:

• Ensure that information systems are in compliance with industry regulations, legal requirements, and internal policies.
• Stay updated on changes in regulations and standards affecting information security.
• Maintain and revise existing compliance programs
• Participate in technology audits and technology project reviews

Controls Evaluation:

• Evaluate the design and operational effectiveness of information systems controls.
• Provide a qualitative and quantitative evaluation based on empirical data findings.
• Recommend improvements to enhance the security posture of the organization.

Vulnerability:

• Assessment: Perform vulnerability assessments and penetration testing to identify and address potential weaknesses in information systems.
• Collaborate with IT teams to remediate vulnerabilities.
• Audit computer systems to minimize risks
• Ensuring that all the organization’s IT assets are protected

Audit Documentation:

• Prepare comprehensive IT audit documentation, including findings, recommendations, and corrective action plans.
• Prepare all documents related to IT finance
• Present audit reports to management and stakeholders.
• Prepare balance sheets and audit statements.

Continuous Improvement:

• Identify opportunities for process improvements and contribute to the development and enhancement of information systems audit methodologies.
• Provide recommendations from assessments
• Delivers reports to communicate observations, issues risks, and areas for improvement.

Collaboration:

• Collaborate with IT and security teams to ensure a unified approach to information systems security.
• Work closely with the Head of Finance to increase the financial efficiency of the company.
• Provide guidance on security best practices.

Qualifications

• Bachelor's Degree in Information Systems, Computer Science, or a related field.
• 3 - 5 years of experience in information systems auditing or a related field.
• Professional certifications such as CISA (Certified Information Systems Auditor) or equivalent are highly desirable.

Required skills:

• Strong teamwork and interpersonal skills
• Strong IT skills
• Proficient in finding creative solutions to complex problems
• Excellent verbal and written communication skills including good presentations and report writing skills
• Detail-oriented and analytical thinker
• Ability to identify, assess and advise on risks for technology projects.

Technical Skills:

• Proficiency in IT audit methodologies and frameworks.
• Knowledge of information security principles and best practices.
• Familiarity with industry regulations (e.g., GDPR, HIPAA, ISO 27001)
• Data analysis and visualization tools such as ACL, MS Office, MS Business Intelligence, SAP, SAC
• Applying IT and Cybersecurity control frameworks including CIS 18, NIST, COBIT.
• Strong analytical and problem-solving skills. Ability to analyze complex information systems and identify areas for improvement.
• System and software applications and related controls including Active Directory, SAP (ERP) roles, and profiles
• Agile project development and/or agile auditing principles
• Excellent written and verbal communication skills. Ability to communicate technical information to both technical and non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and departments.

Application Closing Date
30th January, 2024.