Description

Yako Bank (U) Limited is hiring an IT Internal Auditor responsible for conducting independent and objective assessments of the Bank’s information systems, cybersecurity framework, digital banking channels, core banking systems, and other technology-driven processes. The role ensures adequacy, effectiveness, and compliance of IT controls in line with regulatory requirements and internal policies.

Reports to: Head of Internal Audit

Location: Head Office

Key Result Areas

• Plan and perform IT internal audits, including ICT risk assessments and evaluation of controls over IT systems and applications (both in-house and outsourced platforms).
• Review cybersecurity controls, data protection measures, user access management, and system change management processes.
• Prepare high-quality audit working papers in compliance with internal audit standards and Bank policies.
• Ensure timely completion of audit assignments, including planning, fieldwork, reporting, and follow-up.
• Prepare clear, concise, and quality audit reports highlighting key risks, control gaps, and practical recommendations.
• Participate in quality assurance reviews of IT projects to identify risks early and provide timely advisory support to Management.
• Advise IT and business stakeholders on best control practices to mitigate risks, enhance operational efficiency, and safeguard financial assets.
• Support the Internal Audit Department with simple IT solutions and data analytics tools to enhance audit effectiveness.
• Participate in special investigations and technical reviews requiring IT expertise.
• Contribute to ICT-related training initiatives and support staff awareness on IT control and cybersecurity practices.
• Monitor compliance with Bank of Uganda ICT and information security guidelines.

Required Competencies

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field.
• Professional certification such as CISA, CISM, CISSP, or related qualification is an added advantage.
• Minimum of two (2) years’ experience in IT, IT audit, information security, or related field (experience in a banking or financial institution is an added advantage).
• Strong understanding of IT general controls (ITGC), cybersecurity frameworks, and risk management principles.
• Advanced computer literacy, analytical, numerical, and statistical skills.
• Knowledge of core banking systems and digital banking platforms is an added advantage.

• Plan and perform IT internal audits, including ICT risk assessments and evaluation of controls over IT systems and applications (both in-house and outsourced platforms).
• Review cybersecurity controls, data protection measures, user access management, and system change management processes.
• Prepare high-quality audit working papers in compliance with internal audit standards and Bank policies.
• Ensure timely completion of audit assignments, including planning, fieldwork, reporting, and follow-up.
• Prepare clear, concise, and quality audit reports highlighting key risks, control gaps, and practical recommendations.
• Participate in quality assurance reviews of IT projects to identify risks early and provide timely advisory support to Management.
• Advise IT and business stakeholders on best control practices to mitigate risks, enhance operational efficiency, and safeguard financial assets.
• Support the Internal Audit Department with simple IT solutions and data analytics tools to enhance audit effectiveness.
• Participate in special investigations and technical reviews requiring IT expertise.
• Contribute to ICT-related training initiatives and support staff awareness on IT control and cybersecurity practices.
• Monitor compliance with Bank of Uganda ICT and information security guidelines.

• Strong understanding of IT general controls (ITGC), cybersecurity frameworks, and risk management principles.
• Advanced computer literacy, analytical, numerical, and statistical skills.
• Knowledge of core banking systems and digital banking platforms is an added advantage.

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field.
• Professional certification such as CISA, CISM, CISSP, or related qualification is an added advantage.