About Us

CIC Insurance Group is a leading insurance and financial services organization with over five decades of experience supporting individuals, families, cooperatives, SMEs, and corporates to achieve financial security.

The Group offers a diversified portfolio spanning general insurance, life assurance, microinsurance, asset management, and investment solutions, with operations in Kenya, Uganda, South Sudan, and Malawi, and is listed on the Nairobi Securities Exchange.

Our tagline, “We Keep Our Word,” reflects our unwavering commitment to integrity, transparency, and delivering on our promises to clients, regulators, partners, and communities. CIC is committed to innovation, digital transformation, and prudent risk management to deliver sustainable value across its markets.

About the Role

Reporting to the Director, Internal Audit and Administrative wise, the Internal Auditor role will provide independent and objective assurance on the effectiveness of the organization’s governance, risk management, and internal control processes. The Internal Auditor evaluates operations, identifies risks, ensures compliance with policies and regulations, and recommends improvements to enhance operational efficiency and safeguard organizational assets.

PRIMARY RESPONSIBILITIES:

Internal Audit Planning and Execution

• Participate in risk assessments and contribute to the development of the annual internal audit work plan.
• Develop and implement audit assignments in line with the approved annual Internal Audit Plan. Conduct risk-based audits across underwriting, claims, finance, investments, procurement, HR, IT, branches and other business functions.
• Review business processes, transactions, systems and controls to assess their adequacy, effectiveness and compliance.
• Develop audit objectives, scope, risk and control matrices, audit programmes, working papers and testing procedures for assigned audits.
• Perform substantive and compliance testing and obtain sufficient, reliable audit evidence.
• Identify control gaps, process inefficiencies, financial irregularities and potential risks.
• Prepare clear and evidence-based audit findings and recommendations.

Risk and Internal Control Assessment

• Assess the effectiveness of the company’s internal control environment.
• Identify emerging and existing operational, financial, compliance and strategic risks.
• Evaluate whether identified controls adequately mitigate relevant risks.
• Recommend practical and sustainable control improvements.
• Monitor implementation of agreed risk mitigation and control improvement measures.
• Use data analytics as an integral part of audit planning, risk assessment, testing and continuous monitoring, including analysis of large and complex datasets.
• Develop data-driven audit tests to identify exceptions, trends, anomalies, duplicate transactions, control breaches and other indicators of risk or potential fraud
• Use appropriate analytical and visualization tools, including advanced Excel and relevant tools such as IDEA and Power BI, or equivalent, where applicable.

Financial and Operational Audits

• Review financial transactions, records and reports for accuracy, completeness and compliance.
• Audit revenue, expenditure, payroll, procurement, receivables, payables and other financial processes.
• Review underwriting and claims transactions to identify errors, control weaknesses, leakage and potential fraud.
• Conduct branch and departmental audits as assigned.
• Verify the proper safeguarding and utilization of company assets.

Regulatory and Compliance Audits

• Assess compliance with applicable laws, regulations, regulatory guidelines and company policies.
• Review compliance with insurance industry requirements and internal governance frameworks.
• Identify areas of regulatory non-compliance and recommend corrective measures.
• Follow up on regulatory and internal audit findings to ensure timely closure.
• Keep abreast of changes in legislation, regulatory requirements, insurance practices, technology, data analytics and emerging risks relevant to the business.

Fraud Risk Management

• Identify indicators of fraud, misappropriation, conflicts of interest and other irregularities during audit assignments.
• Support investigations into suspected fraud and control breaches when assigned.
• Evaluate controls designed to prevent and detect fraud.
• Report suspected material irregularities through the appropriate escalation channels.

Audit Reporting

• Prepare timely and accurate audit reports detailing findings, risk implications, root causes and recommendations.
• Discuss audit findings with process owners and agree on practical corrective actions.
• Present significant audit issues to the Director, Internal Audit and relevant management committees.
• Maintain accurate and complete audit documentation in accordance with professional standards.
• Support preparation of Audit Committee and Board papers relating to assigned audit work and key risk/control themes.

Audit Follow-up

• Maintain an updated audit issues and recommendations tracker.
• Conduct periodic follow-up reviews to assess implementation of agreed management actions.
• Escalate overdue or high-risk audit issues to the appropriate authority.
• Validate evidence provided by management before closing audit findings.
• Support internal and external audits and regulatory reviews.

Advisory and Continuous Improvement

• Provide objective advisory support on new processes, systems and control improvements without compromising audit independence.
• Participate in process reviews and risk assessments where required.
• Identify opportunities to improve operational efficiency, cost management and internal controls.
• Keep abreast of emerging audit, risk, technology and insurance industry practices.

Who We’re Looking For

Academic & Professional Qualifications

• Bachelor’s degree in accounting, Finance, Business Administration, Economics, Risk Management Or a related discipline.
• Professional qualification such as CIA, ACCA, CPA, CISA or equivalent is highly desirable.
• Membership of a recognized professional accounting/auditing body is an added advantage.

Experience

• Minimum of 3 years’ experience in internal audit, external audit, risk, compliance or financial control.
• Experience in the insurance or financial services sector is an added advantage.
• Demonstrable experience in risk-based auditing, internal controls, compliance reviews and audit reporting.

Key Competencies

• Analytical & Critical Thinking
• Integrity, Ethics & Professionalism
• Risk & Control Management
• Attention to Detail & Accuracy
• Communication & Stakeholder Management
• Problem Solving & Continuous Improvement
• Advanced Microsoft Excel, including data manipulation, reconciliation and analytical techniques.

Why Join Us

This role offers a unique opportunity to strengthen governance, enhance risk management and internal controls, and contribute to the sustainable growth and performance of a fast-expanding insurance business.

The Internal Auditor is expected to contribute to the evolution of Internal Audit from a predominantly traditional, manual assurance model towards a technology-enabled, data-driven and risk-focused function. The role will use data and technology to increase audit coverage, improve the quality and timeliness of assurance, identify emerging risks and provide actionable insights to management and the Audit Committee.

As an Internal Auditor, you will provide independent assurance on the effectiveness of the organization’s risk management, internal controls, governance, and compliance frameworks. You will identify risks and control gaps, provide practical recommendations, and support management in strengthening processes and accountability.

Your work will safeguard company assets, reduce operational and financial risks, enhance compliance, and drive continuous improvement. The role requires strong integrity, independence, professional judgement, and a commitment to creating sustainable business value.

• Participate in risk assessments and contribute to the development of the annual internal audit work plan.
• Develop and implement audit assignments in line with the approved annual Internal Audit Plan. Conduct risk-based audits across underwriting, claims, finance, investments, procurement, HR, IT, branches and other business functions.
• Review business processes, transactions, systems and controls to assess their adequacy, effectiveness and compliance.
• Develop audit objectives, scope, risk and control matrices, audit programmes, working papers and testing procedures for assigned audits.
• Perform substantive and compliance testing and obtain sufficient, reliable audit evidence.
• Identify control gaps, process inefficiencies, financial irregularities and potential risks.
• Prepare clear and evidence-based audit findings and recommendations.
• Assess the effectiveness of the company’s internal control environment.
• Identify emerging and existing operational, financial, compliance and strategic risks.
• Evaluate whether identified controls adequately mitigate relevant risks.
• Recommend practical and sustainable control improvements.
• Monitor implementation of agreed risk mitigation and control improvement measures.
• Use data analytics as an integral part of audit planning, risk assessment, testing and continuous monitoring, including analysis of large and complex datasets.
• Develop data-driven audit tests to identify exceptions, trends, anomalies, duplicate transactions, control breaches and other indicators of risk or potential fraud
• Use appropriate analytical and visualization tools, including advanced Excel and relevant tools such as IDEA and Power BI, or equivalent, where applicable.
• Review financial transactions, records and reports for accuracy, completeness and compliance.
• Audit revenue, expenditure, payroll, procurement, receivables, payables and other financial processes.
• Review underwriting and claims transactions to identify errors, control weaknesses, leakage and potential fraud.
• Conduct branch and departmental audits as assigned.
• Verify the proper safeguarding and utilization of company assets.
• Assess compliance with applicable laws, regulations, regulatory guidelines and company policies.
• Review compliance with insurance industry requirements and internal governance frameworks.
• Identify areas of regulatory non-compliance and recommend corrective measures.
• Follow up on regulatory and internal audit findings to ensure timely closure.
• Keep abreast of changes in legislation, regulatory requirements, insurance practices, technology, data analytics and emerging risks relevant to the business.
• Identify indicators of fraud, misappropriation, conflicts of interest and other irregularities during audit assignments.
• Support investigations into suspected fraud and control breaches when assigned.
• Evaluate controls designed to prevent and detect fraud.
• Report suspected material irregularities through the appropriate escalation channels.
• Prepare timely and accurate audit reports detailing findings, risk implications, root causes and recommendations.
• Discuss audit findings with process owners and agree on practical corrective actions.
• Present significant audit issues to the Director, Internal Audit and relevant management committees.
• Maintain accurate and complete audit documentation in accordance with professional standards.
• Support preparation of Audit Committee and Board papers relating to assigned audit work and key risk/control themes.
• Maintain an updated audit issues and recommendations tracker.
• Conduct periodic follow-up reviews to assess implementation of agreed management actions.
• Escalate overdue or high-risk audit issues to the appropriate authority.
• Validate evidence provided by management before closing audit findings.
• Support internal and external audits and regulatory reviews.
• Provide objective advisory support on new processes, systems and control improvements without compromising audit independence.
• Participate in process reviews and risk assessments where required.
• Identify opportunities to improve operational efficiency, cost management and internal controls.
• Keep abreast of emerging audit, risk, technology and insurance industry practices.

• Analytical & Critical Thinking
• Integrity, Ethics & Professionalism
• Risk & Control Management
• Attention to Detail & Accuracy
• Communication & Stakeholder Management
• Problem Solving & Continuous Improvement
• Advanced Microsoft Excel, including data manipulation, reconciliation and analytical techniques.

• Bachelor’s degree in accounting, Finance, Business Administration, Economics, Risk Management Or a related discipline.
• Professional qualification such as CIA, ACCA, CPA, CISA or equivalent is highly desirable.
• Membership of a recognized professional accounting/auditing body is an added advantage.