Manager: IT Internal Audit (M-Pesa)

Overview

The Manager for IT Internal Audit is accountable for performing technology and integrated audits, alongside ad hoc management tasks, aimed at reinforcing the control environment within cyber security, IT operations, and application audits. All audit activities are expected to comply with the Internal Audit methodology and professional standards.

Primary Responsibilities

• Execute audits following the approved annual audit schedule.
• Draft clear, well-evidenced audit reports highlighting critical risks, root causes, and actionable recommendations.
• Ensure audit deliveries adhere to Internal Audit methodologies, Institute of Internal Auditors (IIA) standards, and quality benchmarks.
• Identify and document audit findings using independent judgment related to examined areas.
• Utilize data analytics within audits to enhance assurance scope, insight quality, and audit efficiency; propose and implement improvements.

Key Performance Indicators

• Complete assigned audits according to the annual plan on schedule with minimal supervision.
• Conduct cyber security, application, and general IT audits per defined scope and plan.
• Integrate data analytics testing within audit procedures.
• Ensure audits are performed consistent with Internal Audit methodology and IIA standards.
• Produce high-quality audit reports featuring clear findings, assigned actions, and accountable parties.
• Monitor and follow up on audit action plans adhering to agreed timelines.
• Meet Quality Assurance Review (QAR) objectives through effective self and peer review and timely improvements.
• Manage stakeholder relationships across the organization.
• Stay updated on developments in technology internal audit practices and technical fields.

Required Competencies and Experience

• Strong IT audit expertise combined with analytical skills, stakeholder management, communication, and project delivery capabilities.
• Experience in IT governance, cyber security, data analytics, and audit processes.

Technical Knowledge

• Familiarity with relevant frameworks such as NIST, COBIT, ITIL, COSO, ISO17799/ISO27001.
• In-depth understanding of technology and financial services platforms including:
• Operating systems: UNIX, LINUX, Windows
• Databases: SQL, Sybase, Oracle
• IT Networks and Firewalls
• Data Centers
• Cyber security principles
• Data Analytics tools (SQL, PowerBI, QlikSense)
• Intelligent Automation technologies (RPA, AI, Machine Learning)
• Awareness of relevant laws impacting IT audit and control.

Qualifications

• A Bachelor's degree in an IT-related discipline such as Computer Science, Informatics, or Information Systems.
• Possession of at least one professional certification like CISA, CISSP, or CISM is mandatory.

Professional Experience

• Between three to five years of audit experience with at least three years focused on applications, infrastructure, and general IT audits.
• Preferred experience includes a minimum of three years in Cyber Security audits and familiarity with data analytics.
• Experience in the financial services sector and possession of a postgraduate degree are advantageous.

Additional Information

Applicants who may not fully meet all criteria but are enthusiastic about the role are encouraged to apply, as they might be a fit for this or other positions.

About Vodafone

Vodafone is an established global telecommunications provider serving millions. The company values connectivity’s power to drive positive change and fosters an inclusive environment that embraces diversity, equity, and belonging. Accessibility accommodations are available upon request during recruitment.