Senior Systems Auditor

Nairobi Hospital is seeking an experienced and analytically rigorous Senior Systems Auditor to lead technology and information systems audit engagements across its complex ICT environment. Reporting to the Internal Audit Manager, this role carries supervisory responsibility for the Information Systems Audit Unit and serves as the Hospital's principal technical authority on IS audit matters, including cybersecurity assurance, ERP controls, and digital infrastructure risk.

The successful candidate will provide independent, risk-based assurance over the Hospital's Kranium HMIS, Navision ERP, LIMS, PACS, billing platforms, and wider digital ecosystem. Operating within the TeamMate Audit and TeamMate Analytics platforms, you will drive end-to-end audit automation — from planning and fieldwork through to evidence management, reporting, and issue closure — while coaching junior auditors and collaborating directly with the ICT Director and project teams on major system implementations.

• Plan, lead, and execute risk-based IS audit engagements covering Kranium HMIS, Navision ERP, LIMS, PACS, and billing platforms in accordance with IIA Standards and ISACA/COBIT frameworks.
• Develop comprehensive IS audit programmes addressing IT General Controls (ITGC), application controls, access management, change management, cybersecurity controls, and data governance.
• Assess the design and operating effectiveness of network security and application-level controls within both clinical and administrative systems.
• Provide supervisory oversight over the Information Systems Audit Unit, including planning and assigning work, reviewing working papers and draft audit reports for technical adequacy, and coaching the Information Systems Auditor.
• Configure and optimise TeamMate Audit and TeamMate Analytics workflows and automation rules to ensure the full audit lifecycle is managed on an end-to-end automated basis.
• Handle complex IS audit assignments in direct conjunction with the Internal Audit Manager, including major system implementations, cybersecurity assurance reviews, penetration testing assurance, and data migration controls.
• Collaborate with the ICT Director and project teams to embed controls at each milestone of Kranium HMIS and Navision ERP implementations and upgrades.
• Review the integrity, reliability, and security of data generated by clinical and administrative systems, assessing controls over data capture, processing, storage, and reporting.
• Evaluate disaster recovery (DR) testing outcomes and assess the adequacy of business continuity plans (BCPs) for IT-dependent hospital operations.
• Test and identify network and system vulnerabilities and develop counteractive strategies to protect the Hospital's information assets.
• Apply TeamMate Analytics alongside other Computer-Assisted Audit Techniques (CAATs) across pharmacy, laboratory, and administrative data sets to surface anomalies and control exceptions.
• Prepare clear, evidence-based audit reports with actionable findings and recommendations for senior management and the Board Audit Committee.

• Demonstrate at least six (6) years of hands-on IS audit experience, with a minimum of two (2) years in a supervisory or team lead capacity within a complex, multi-system environment.
• Execute IT General Controls (ITGC) reviews and application control assessments independently, applying COBIT, ISO 27001, or equivalent frameworks.
• Operate and configure TeamMate Audit and/or TeamMate Analytics platforms to automate audit workflows, or demonstrate equivalent GRC/audit management platform proficiency.
• Perform data analytics using CAATs tools (ACL/Galvanize, IDEA, or similar) to interrogate large transactional datasets and identify control exceptions.
• Conduct or coordinate cybersecurity assurance reviews, vulnerability assessments, and penetration testing assurance engagements.
• Assess ERP environments — particularly Microsoft Dynamics Navision — for segregation of duties, access controls, and configuration risks.
• Communicate complex technical audit findings clearly in written reports and verbal presentations to non-technical senior management audiences.
• Hold a Bachelor's degree in Computer Science, Information Systems, Information Technology, or a closely related field.
• Hold or be actively pursuing CISA (Certified Information Systems Auditor) certification; CISSP, CRISC, or CIA is an added advantage.
• Demonstrate working knowledge of healthcare information systems (HMIS, LIMS, PACS) and the regulatory and data governance context applicable to a hospital setting.

Nairobi Hospital offers a competitive remuneration package commensurate with qualifications and experience. Based on Kenyan market benchmarks for senior IS audit professionals in the healthcare sector, the estimated monthly gross salary range is KES 200,000 – 350,000. The Hospital's total rewards package typically includes medical cover, a structured performance management framework, and opportunities for professional development and certification support.

Ideal candidate: A seasoned IS auditor with deep ITGC and application controls experience, hands-on ERP audit exposure (preferably Navision), and a track record of supervising junior auditors and delivering high-quality audit reports. You are CISA-certified (or near completion), comfortable with data analytics tools, and capable of influencing ICT leadership on control matters. Experience within a hospital, healthcare institution, or similarly regulated environment is a strong differentiator.

Do not apply if: You have fewer than five years of IS audit experience, hold no relevant professional certifications, have never led or supervised an audit team, or are applying from a purely IT operations or IT support background without audit assurance experience.

• Prepare an updated CV and a cover letter addressing your IS audit experience, supervisory background, and CISA/relevant certification status.
• Quote the reference number TNH/HHR/SSA/06/2026 in your application subject line or cover letter.
• Submit your application through Nairobi Hospital's official careers portal or via the email address specified in the Hospital's official recruitment communication.
• Only shortlisted candidates will be contacted. Nairobi Hospital is an equal opportunity employer.