Request for Proposals (RFP) for the engagement of an IT Audit Firm at an Impact-driven Organization

We are an impact-driven organization dedicated to advancing women’s inclusion in public life, economic empowerment, and peace processes across Africa. 

As part of our commitment to operational excellence, we invite applications for:

Title: Request for Proposals (RFP) for the engagement of an IT Audit Firm to Assess IT Systems, Processes, and Governance Structures

Location: Ikoyi, Lagos
Employment Type: Contract

Project Overview

• A dynamic organization is seeking an experienced IT Audit Firm to assess its IT systems, processes, and governance structures to identify vulnerabilities, improve operational efficiency, and enhance compliance with data security regulations.

Objectives
The key objectives of this engagement include:

• Evaluating the IT infrastructure and processes to ensure industry best practices.
• Identifying system vulnerabilities, inefficiencies, and security risks.
• Assessing data security, privacy measures, and regulatory compliance.
• Providing strategic recommendations to enhance IT governance and operational efficiency.

Scope of Work
The IT audit will cover the following areas:

• IT Governance – Review IT policies, strategies, and alignment with business objectives.
• Infrastructure & Systems – Assess network security, server configurations, and cloud services.
• Data Security & Privacy – Evaluate data storage, encryption, access controls, and compliance with GDPR/NDPR.
• IT Operations – Review incident management, IT support processes, and resource allocation.
• Disaster Recovery & Business Continuity – Assess backup procedures and system resilience.
• Recommendations & IT Roadmap – Provide actionable insights for improvement.

Methodology
The selected IT Audit Firm will:

• Conduct stakeholder interviews to understand IT needs.
• Review existing IT policies, documentation, and systems.
• Perform vulnerability assessments & performance evaluations.
• Submit a detailed audit report with key findings and recommendations.

Deliverables & Timeline
This engagement is expected to run for 4 weeks, with the following milestones:

• Week 1: Submission of Inception Report (Audit Plan & Methodology).
• Week 3: Interim Report with Preliminary Findings.
• Week 4: Final Report & Presentation of Recommendations.

Required Qualifications & Experience

• Proven experience conducting IT audits for medium to large organizations.
• Expertise in IT governance, cybersecurity, and operational efficiency.
• Certifications such as CISA, CISSP, or ISO 27001 preferred.
• Familiarity with GDPR, NDPR, and other data protection laws.

Application Closing Date
27th February, 2025.