ICT Internal Auditor Officer

UEDCL · Kampala

Salary not disclosed

Full-time · Mid level · Technology · Posted today

Reports to: Senior Internal Auditor ICT

About the role

The job holder contributes to effective ICT governance, risk management and internal controls by providing independent assurance over UEDCL’s information systems and technology operations.

Responsibilities

• Support the planning and execution of risk-based ICT audits in accordance with the approved Internal Audit Annual Operational Plan, audit methodologies and established professional standards.
• Assess adherence to recognized ICT governance, risk and security frameworks and good practices, including COBIT, ISO 27001 and other relevant standards as applicable.
• Perform audit reviews of ICT infrastructure, systems, applications, databases, networks and technology-related processes to assess the adequacy, effectiveness and efficiency of controls.
• Assess ICT risks and controls relating to cybersecurity, access management, data protection, system availability, change management, IT operations, disaster recovery, business continuity and information integrity.
• Prepare complete and accurate audit working papers documenting audit procedures performed, evidence obtained, analyses undertaken and conclusions reached.
• Support the preparation of ICT audit reports by providing well-supported findings, conclusions and practical recommendations to strengthen ICT controls and risk management.
• Follow up agreed ICT audit recommendations and management action plans and validate the implementation status of corrective actions.
• Maintain proper custody, confidentiality and integrity of audit information and evidence obtained during audit assignments.
• Maintain awareness of emerging ICT risks, cybersecurity threats, technologies and regulatory developments and apply relevant knowledge during ICT audit engagements.
• Provide input into ICT risk assessments and the development of ICT audit programmes based on knowledge gained from previous audits, emerging risks and changes within the ICT environment.
• Collaborate effectively with other Internal Audit team members and relevant stakeholders during integrated, operational, financial and ICT-related audit assignments.
• Perform any other ICT audit-related duties assigned by the Senior Internal Auditor ICT or Internal Audit management in accordance with the mandate of the Internal Audit function.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Computer Engineering, Cybersecurity or a related field.
• Professional certification or progress towards obtaining a relevant certification such as Certified Information Systems Auditor (CISA), Certified in Cybersecurity (CC), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or equivalent is an added advantage.
• Affiliate membership to a relevant professional body is desirable.
• Minimum of three (3) years of relevant experience in ICT auditing, information technology, cybersecurity, IT risk management, information systems controls or a related field.
• Practical knowledge of ICT controls, cybersecurity principles, IT governance and information systems risk management.
• Experience in the use of data analytics or computer-assisted audit techniques is an added advantage.
• Experience within the utility, energy or other regulated sector is an added advantage.
• Knowledge of ICT audit methodologies and risk-based internal auditing principles.
• Understanding of IT governance and control frameworks such as COBIT, ISO 27001, NIST and other relevant standards.
• Knowledge of cybersecurity risks and controls.
• Understanding of IT general controls, including user access and identity management, change management, IT operations, backup and recovery, disaster recovery and business continuity, incident and problem management, and information security management.
• Basic understanding of application controls, databases, operating systems, networks and cloud computing environments.
• Ability to use data analytics and computer-assisted audit tools to support audit testing.
• Ability to evaluate ICT processes, identify control weaknesses and recommend practical corrective actions.
• Ability to prepare clear, complete and properly referenced audit working papers.
• Good understanding of relevant ICT policies, laws, regulations and data protection requirements.

How to apply

• Online: uedclrecruitment.uedcl.co.ug

Full-time mid-level Technology role at UEDCL in Kampala, Uganda. Salary: not disclosed.

Posted 3 Nov 2026 · Last updated 3 Nov 2026 · Closes 15 Nov 2026 · Job ID 42