IT Audit Manager

Position Summary

The IT Audit Manager role, reporting to the Chief Internal Audit, is responsible for delivering value-added assurance and advisory services within the bank's audit function. This position supports the enhancement of risk management and contributes to achieving the bank's strategic goals by executing comprehensive internal audits related to information technology and cyber risks.

Key Duties and Responsibilities

• Assist in formulating the IT Audit plan in line with the Annual Audit Programme.
• Participate in defining a thorough audit universe covering technology and cyber risk areas and conduct robust risk assessments during audit planning.
• Continuously monitor and report on the bank's ICT system controls and associated cyber risks, including those involving third-party interfaces.
• Evaluate the design and operational effectiveness of the technology and cyber risk management frameworks implemented.
• Ensure that regular independent threat and vulnerability assessments are conducted and reviewed.
• Develop tailored audit tests targeting identified IT risks to confirm effective risk management or mitigation.
• Perform assigned audit tasks including planning, assessing, documenting outcomes, reporting, and follow-up as per the audit schedule.
• Compile clear and precise audit reports outlining findings, instances of non-compliance, and propose corrective actions, discussing these with management before finalization.
• Collaborate on and monitor resolution of IT issues uncovered during audits to ensure timely compliance with recommendations.
• Investigate alleged or suspected fraud and forgery cases when required.
• Lead efforts to promote optimal use of audit tools and software by providing necessary support to audit teams.
• Exhibit professional diligence in assessing operational efficiencies and suggest improvements for cost savings and earnings enhancement.
• Commit to continuous professional growth through self-directed learning, engaging with professional bodies, attending relevant courses, and internal training.
• Perform any additional duties related to the role as assigned by the supervisor.

Education and Professional Qualifications

• A Bachelor’s degree in Information Systems/Technology, Computer Science, or a related discipline from a recognized university.
• Possession of certifications such as Certified Information Systems Auditor (CISA) is essential. Additional certifications like Certified Ethical Hacker (CEH), Computer Hacking Forensic Investigator (CHFI), or Certified Information Systems Security Professional (CISSP) are advantageous.
• Strong technical understanding of information systems including information security, application controls, IT project management, computer networks, databases, and operating systems.
• Familiarity with accounting and operational auditing is considered an added benefit.

Experience Requirements

• Minimum of three years experience in audit or a related field, preferably within a financial institution environment.

Skills and Competencies

• Excellent interpersonal skills and ability to collaborate effectively with teams.
• Proficient analytical capabilities to evaluate diverse data and information critically.
• Capable of maintaining performance under pressure and meeting deadlines.
• Effective negotiation skills and commitment to exceeding objectives.
• High professional integrity and ethical standards.
• Competent in Microsoft Word and Excel.
• Skilled in gathering, analyzing, and summarizing information to produce concise written reports.
• Strong verbal and written communication skills for clear dissemination of information.
• Adept at building cooperation and support among stakeholders.
• Adaptability to evolving requirements and circumstances.
• Persuasive interpersonal abilities to influence diverse groups within the organization.
• Observant, inquisitive, disciplined, and responsible in professional conduct.

Application Details

Applications including a cover letter and CV should be submitted to the Head of Human Resources at recruitment@cbu.co.ug by 5 pm on Wednesday, 12th August, 2026.