Position: Senior Internal Auditor- IT Systems
Department: Internal Audit Department
Reports to: Head Internal Audit
Supervises: NA NA
Interacts/interfaces with: Internal: Heads of department External: External Auditors, Regulators
Main Purpose of the Job
Assess the bank’s IT risks, evaluate the adequacy of IT controls, and recommend improvements to enhance system integrity, security, and efficiency.
Responsibilities
- Execute IT audits as per the audit plans and in accordance with policies, procedures, and best practices as might be necessary.
- Participate in developing the annual Internal Audit Plan concerning IT audits.
- Provide assurance on IT governance, security, and processes to ensure that the bank’s objectives are achieved
- Provide consultancy services to project teams on IT risk, system controls, and best practices while maintaining audit independence.
- Carry out regular reviews of Bank IT systems and analysis of financial data to provide early warning signs needed for further investigations.
- Monitor the bank’s IT environment for emerging risks and trends, ensuring timely response and adaptation.
- Review the bank’s IT systems and processes and advise on compliance with applicable laws, regulations, and industry standards, such as data privacy regulations
- Provide practical suggestions (recommendations) to Management and the Board to address IT control weaknesses identified across the bank.
- Contribute to developing and refining IT audit methodologies and tools.
- Evaluate and assess significant merging/consolidating functions and new or changing services, processes, operations, and control processes coincident with their development, implementation, and /or expansion.
- Undertake to assist in investigating internal and external fraud cases, as requested.
- Regularly carry out reviews on disaster recovery, IT Security, change management process, user access rights, and super user activities, among others.
- Ensure that snap checks, including ICT (super-user activities, Access rights, etc.), are carried out occasionally.
- Give guidance and advice on the impact of non-compliance with IT controls and statutory regulation on the Bank.
- Liaise with IT departmental heads to ensure audit findings and recommendations are fully accepted and implemented.
- Evaluate the adequacy and effectiveness of IT controls in safeguarding the bank’s information assets.
- Evaluate the integrity of the risk management information systems, including the accuracy, reliability, and completeness of the data used.
- Comply with AML/CFT/CPF policies and procedures, non -compliance of which shall be addressed as per the bank disciplinary processes.
- Any other duty as shall be assigned to you from time to time.
Person Specification (Education, training, skills and experience)
Qualifications
- Bachelor’s degree in accounting, statistics, Information Technology, Computer Science, or a related field
Professional certifications: CISA, CRISC, or other related certifications.
Experience
- Minimum of 4 years of work experience in audit, IT audit, or IT risk management, preferably within the banking or financial services industry.
- Excellent knowledge of IIA Standards and Legislation.
- Knowledge and application of modern IT security management practices in financial services.
- Experience with auditing core banking systems, IT infrastructure, and cybersecurity frameworks.
Competencies & Knowledge
- Proficiency in drafting professional correspondence, reports, and proposals.
- Excellent communication and presentation skills.
- Strategic and dynamic thinking.
- Leadership and Change Management skills
- Stakeholder and Relationship Management skills
- High ethical standards and integrity.
- Neutrality and independence of judgment
- Problem-solving abilities.
- Proficiency in English Language and any other local language, preferably Luganda
NOTE: Tropical Bank Ltd is an equal opportunity employer. All applicants wil be considered for employment without attention to race, color, religion, sex, national origin or disability status Recruitment is strictly based on ment Offering, soliciting, or accepting any form of undue advantage during the recruitment process will result in automatic disqualification.
DEADLINE is 30th SEPTEMBER 2026
In accordance with the Uganda Data Protection and Privacy Act, 2019, Tropical Bank Ltd is committed to protecting the privacy and confidentiality of personal data collected during the recruitment process. By submitting your application, you consent to the collection, use, and processing of your personal information solely for recruitment and employment purposes, and in compliance with applicable date protection laws. Your information will not be shared with unauthorized third parties and will be retained only as long as necessary for the stated purposes.
Only shortlisted candidates will be contacted.
