Senior Systems Auditor

Nairobi Hospital, one of Kenya's most respected and internationally compliant healthcare institutions, is seeking a highly capable Senior Systems Auditor to lead technology and information systems audit functions across its ICT environment. This is a senior, high-impact role that combines technical depth with supervisory leadership, requiring the ability to independently plan and execute complex IS audit engagements while providing functional oversight of the Information Systems Audit Unit.

Reporting to the Internal Audit Manager and working under reference REF: TNH/HHR/SSA/06/2026, the successful candidate will provide risk-based, independent assurance over the Hospital's Kranium HMIS, Navision ERP, and broader digital infrastructure. They will champion the end-to-end automation of the audit lifecycle using the TeamMate Audit and TeamMate Analytics platforms, ensuring audit planning, fieldwork, evidence management, and reporting are fully digitised and compliant with IIA Standards and ISACA/COBIT frameworks.

• Plan, lead, and execute risk-based IS audit engagements across Kranium HMIS, Navision ERP, LIMS, PACS, billing platforms, and digital infrastructure in line with the approved Annual Audit Work Plan.
• Develop comprehensive IS audit programmes covering IT General Controls (ITGC), application controls, access management, change management, cybersecurity controls, and data governance.
• Assess the design and operating effectiveness of network security and application-level controls within both clinical and administrative systems.
• Provide supervisory oversight of the Information Systems Audit Unit — assign audit work, review working papers and draft reports for technical adequacy, and coach the Information Systems Auditor.
• Configure and lead the use of TeamMate Audit and TeamMate Analytics platforms, establishing automated workflows and rules that govern the full audit lifecycle from planning through issue tracking and closure.
• Handle technically complex IS audit assignments in direct partnership with the Internal Audit Manager, including major system implementations, cybersecurity assurance reviews, penetration testing assurance, and data migration controls.
• Collaborate with the ICT Director and project teams to provide advisory and assurance input on Kranium HMIS and Navision ERP implementations and upgrades.
• Identify and assess emerging IT risks across clinical systems, administrative platforms, and cyber infrastructure, ensuring findings are escalated appropriately and remediation is tracked to closure.
• Prepare high-quality audit reports that clearly articulate root causes, risk ratings, and actionable recommendations for both technical and executive audiences.
• Contribute to the development and continuous improvement of IS audit methodologies, tools, and quality standards within the internal audit function.

• Must hold a Bachelor's degree in Information Technology, Computer Science, Information Systems, or a closely related field.
• Must possess at least 6 years of progressive experience in IT or information systems auditing, with demonstrated exposure to complex, multi-system ICT environments.
• Must be certified as a Certified Information Systems Auditor (CISA); additional certifications such as CISM, CRISC, or CIA are a strong advantage.
• Must demonstrate hands-on ability to audit ERP systems (ideally Navision/Microsoft Dynamics) and healthcare management information systems such as Kranium HMIS.
• Must be able to configure and operationalise audit management platforms — specifically TeamMate Audit and TeamMate Analytics — including workflow automation and data analytics modules.
• Must be capable of independently applying COBIT, IIA Standards, and ISO 27001 frameworks to IS audit engagements without supervisory guidance.
• Must demonstrate proven supervisory or mentoring experience over junior auditors or audit teams.
• Must be able to assess cybersecurity controls, interpret penetration testing reports, and translate technical findings into risk-rated audit observations.
• Must be able to produce board-ready and management-level audit reports with clarity, precision, and appropriate technical depth.
• Must have strong analytical skills with the ability to use data analytics tools to identify anomalies, trends, and control weaknesses across large datasets.

Nairobi Hospital offers a competitive remuneration package commensurate with the seniority of this role and the candidate's qualifications and experience. Based on Kenyan market benchmarks for senior ICT audit professionals in the healthcare sector, the estimated monthly salary range is KES 200,000 – 350,000. The Hospital is known for offering a structured, professionally rewarding environment with opportunities for growth within its internal audit function.

• Competitive salary aligned to seniority and experience
• Medical cover (implied by healthcare employer context)
• Professional development and certification support
• Stable, reputable institutional employer

This role is ideal for a seasoned IS auditor who thrives in technically complex environments, is comfortable leading peers, and takes ownership of audit quality end-to-end. You are the right candidate if you have deep hands-on experience auditing enterprise systems, can independently apply audit frameworks, and are confident managing junior auditors while interfacing with senior ICT and executive leadership. Professionals transitioning from Big Four IT advisory or risk consulting backgrounds with relevant healthcare sector exposure are encouraged to apply.

Do not apply if you have fewer than 6 years of IS audit experience, lack CISA certification, have no experience with ERP or HMIS auditing, or are not comfortable with audit automation platforms and data analytics tools. This is not an entry-level or general IT role.

Interested and qualified candidates should submit their applications before the closing date of 30 June 2026. Please quote the reference number REF: TNH/HHR/SSA/06/2026 in your application. Applications should include a detailed CV and a cover letter highlighting your IS audit experience, relevant certifications, and systems exposure. Submit your application through the Nairobi Hospital careers portal or via the official application channel indicated on their website. Important: Do not pay any fee, notarisation charge, or assessment cost at any stage of this recruitment process.