Applications are invited from suitably qualified Ugandans to fill the following positions in various Departments of Bank of Uganda;
1. Department: Internal Audit
2. Job code: IA2.02
3. Title: Head of Systems Audit Division (1 position)
4. Rank: Deputy Director
5. Reports to: Director, Internal Audit
6. Supervises: Team Leaders in the Division.
7. JOB PURPOSE:
To schedule, plan, conduct and coordinate audit and investigation assignments in the Bank IT infrastructure. Monitors control systems, which ensure the integrity and security of data and reviews the Bank’s computing and networking environment and usage of computer facilities. Reviews application systems and associated procedures to ensure that they meet desired objectives in a timely & efficient manner.
8. DUTIES AND RESPONSIBILITIES:
i. Oversee audit tasks as per the annual work plan, ensuring they are completed within the timeframe and in accordance with internal audit policies and applicable standards.
ii. Review divisional work-plans, IT risk assessments, budget proposals, and
Conduct Level 2 reviews of draft IT audit reports iii. Oversee vulnerability and penetration testing on information systems and IT infrastructure.
iv. Examine and evaluate the adequacy and effectiveness of information systems, the related business controls and develop appropriate audit programs in the assigned areas.
v. Evaluate the adequacy of security and processing controls in each audit, including the effective-ness of general computer controls and the IT environment.
vi. Review the computing environment, system software, system development, security procedures, and internal control procedures for systems under development or enhancements.
vii. Conduct compliance reviews of the Bank’s IT environment and follow up on the implementation of internal and external IT audit recommendations.
viii. Coordinate the activities of the Audit Departmental Risk Committee and monitor operations of the IT forensic lab. ix. Oversee the automation of audit processes and upgrades of ComputerAssisted Audit Techniques (CAATS).
x. Any other duties as assigned by the supervisors.
9. EXPECTED OUTPUTS
Expected outputs/ Deliverables
• Draft IT Risk assessment
• Divisional Workplan
• Draft IT Audit Programs
• IT Audit workpapers
• Draft IT Audit Reports
• Draft IT Investigation reports
• Divisional Budget Proposals
• Departmental Risk Register
10. PERSON SPECIFICATION A. MINIMUM QUALIFICATIONS
• First class or second class upper – Bachelor’s degree in information technology, Information Systems Management, Computer science or closely related degree from a recognized institution.
• Full membership of ISACA is mandatory. Professional certification in any other area: CGEIT, IIA, Certified Data Privacy Solution Engineer (CDPSE) are an added advantage.
• A Master’s degree in any of the above-mentioned fields.
B. EXPERIENCE
At least eight (8) years’ work experience with a minimum of three (3) years in Audit practice, at Senior Management level with a reputable organisation.
C. AGE:
35-50 YEARS.
D. COMPETENCIES
i) Technical skills
• Must be knowledgeable in any of the following standards: COBIT, ITIL and ISO • Strong quantitative, analytical, and technical skills
• Strong computer skills including proficiency in computer-aided audit techniques (CAATs) audit management software.
• Thorough knowledge of auditing standards, technology/security focused regulations, IT general controls and application controls.
• Understanding of IT Governance and IT Risk Management concepts.
• Knowledge of information technology and similar industry frameworks
• Knowledge of Project Management
• Knowledge of business process analysis
• Report-writing, presentation skills
• Leadership skills
ii) Behavioral skills
• Customer Focused
• Collaborative
• Ethical with a high level of Integrity
• Independent and Objective
• Effective Communication skills
• Team Player with excellent interpersonal Skills, Action and Result Oriented
Interested applicants Click here to apply
Salary and Benefits for the position are generous and attractive. The online applications should be accompanied by:
1) A copy of the National Identity Card (Front and Back).
2) A copy of Academic documents as indicated in the job description.
3) A duly registered Statutory Declaration for applicants with differing Dates of Birth or Names across any of the required documents.
4) A letter of equivalence from the National Council of Higher Education for applicants whose first degree was obtained from a foreign university.