SYSTEM INTERNAL AUDITOR – THE NYERI NATIONAL POLYTECHNIC

SYSTEM INTERNAL AUDITOR – THE NYERI NATIONAL POLYTECHNIC

Job Type: Full Time

Qualification: Bachelor’s Degree, Professional Certification

Experience: 4 Years

Location: Nairobi

Job Field: Finance / Accounting / Audit, ICT / Computer

Posted: August 13, 2026

Deadline: August 24, 2026

Apply for the System Internal Auditor position at The Nyeri National Polytechnic. The role requires a Bachelor’s degree in Computer Science or IT, at least four years of relevant experience, and professional CISA qualification or ongoing certification.

JOB OVERVIEW

The Nyeri National Polytechnic is seeking a qualified, dedicated and experienced System Internal Auditor to join its Internal Audit Department. The successful candidate will be responsible for evaluating and strengthening the institution’s information technology governance, application systems, data integrity, cybersecurity controls and general IT controls.

The position is suitable for an IT audit, cybersecurity or systems professional with strong analytical skills and experience assessing technology risks and internal controls.

JOB DESCRIPTION

The System Internal Auditor will play an important role in evaluating the effectiveness, security and reliability of the Polytechnic’s technology environment. The position will focus on identifying technology-related risks, assessing existing controls and providing practical recommendations that can strengthen the institution’s information systems and protect its data and digital resources.

The successful candidate will conduct comprehensive audits covering core business applications, databases, operating systems and network infrastructure. These audits will assess whether systems are operating reliably, whether information is accurate and secure, and whether appropriate controls are in place to protect institutional data.

A major responsibility will involve reviewing and testing IT general controls (ITGCs). This will include evaluating access management, change management, backup and disaster recovery arrangements, computer operations and other technology processes across different departments within the institution.

The System Internal Auditor will also be responsible for planning, executing and documenting audit assignments in accordance with applicable professional standards, including standards of the Institute of Internal Auditors (IIA). Proper audit documentation will be required to support findings, conclusions and recommendations.

The role will require the auditor to identify system vulnerabilities, technology risks, control weaknesses and their underlying causes. Findings will need to be communicated through clear and objective audit reports that provide practical recommendations for management. The auditor will also monitor previously identified issues and verify whether management has implemented agreed corrective actions.

The position may also involve assisting with technical investigations relating to system misuse, data breaches, automated process failures and other technology-related incidents. This requires a high level of integrity, professional independence and discretion when dealing with potentially sensitive institutional information.

Compliance will be another important aspect of the role. The successful candidate will assess whether ICT operations comply with internal ICT policies, standard operating procedures and applicable Kenyan laws and regulatory requirements. This includes relevant provisions relating to data protection and computer misuse and cybercrime.

The System Internal Auditor will work closely with the Head of Internal Audit, Audit Committee and other relevant departments. The position requires the ability to communicate technical findings in a clear and understandable manner to both technical and non-technical stakeholders.

The ideal candidate should be analytical, detail-oriented and capable of working independently. They should have the ability to assess complex systems, identify risks and develop recommendations that improve IT governance, cybersecurity and operational efficiency.

KEY RESPONSIBILITIES

Conduct audits of business applications, databases, operating systems and network infrastructure.

Evaluate system reliability, data integrity and cybersecurity controls.

Review and test IT general controls across the Polytechnic.

Assess access management and user privileges.

Review change management processes and controls.

Evaluate backup and disaster recovery arrangements.

Assess computer operations and technology-related processes.

Plan, execute and document audit assignments.

Conduct audit fieldwork in line with professional auditing standards.

Identify system vulnerabilities, risks and control weaknesses.

Determine root causes of identified audit findings.

Prepare clear and objective internal audit reports.

Provide practical recommendations to address identified risks.

Assist with investigations involving system misuse and data breaches.

Support investigations into automated process failures.

Assess compliance with internal ICT policies and procedures.

Evaluate compliance with relevant Kenyan ICT and data protection laws.

Track management action plans arising from previous IT audit findings.

Verify implementation of agreed corrective actions.

Perform other relevant duties assigned by the Head of Internal Audit or Audit Committee.

QUALIFICATIONS AND REQUIREMENTS

Bachelor’s degree in Computer Science, Information Technology or a related field from a recognized university.

Minimum of four years’ active experience in IT audit, system administration or cybersecurity assessment.

Experience working in the public sector or a learning institution is an added advantage.

Professional qualification in Certified Information Systems Auditor (CISA) or currently pursuing CISA.

Registration with a relevant professional body is an advantage.

Membership of the Institute of Internal Auditors (IIA) is an added advantage.

Strong knowledge of IT systems and information security.

Good understanding of cybersecurity controls and IT internal controls.

Strong analytical and problem-solving abilities.

Excellent audit report-writing and communication skills.

High level of integrity and professional independence.

Ability to work with minimal supervision.

Ability to meet strict deadlines and manage audit assignments effectively.

KEY COMPETENCIES

The ideal candidate should demonstrate strong analytical thinking and the ability to assess technology environments objectively. Attention to detail is essential because the role involves examining systems, processes, access controls, security measures and audit evidence.

Strong communication skills are also required. The successful candidate must be able to prepare professional audit reports and explain technical findings, risks and recommendations clearly to management and other stakeholders.

Professional independence and integrity are particularly important because the System Internal Auditor will be responsible for providing objective assessments of the Polytechnic’s technology controls.

The candidate should also demonstrate good time management, the ability to work under minimal supervision and the capacity to handle multiple audit activities while maintaining professional standards.

APPLICATION DETAILS

Applicants should submit their application letter, CV, copies of relevant academic and professional certificates and testimonials to the institution.

Applications should be addressed to:

THE CHIEF PRINCIPAL

THE NYERI NATIONAL POLYTECHNIC

P.O. BOX 465-10100

Deadline: August 24, 2026

DISCLAIMER

Jobseekers should verify recruitment information through the employer before submitting personal documents. Never pay money to secure a job, interview, shortlisting or recruitment opportunity.

For more job description visit: jobopenings.co.ke