Vacancy title:
ICT Internal Auditor Officer
Employment type: Full time, Industry: Professional Services, Category: Computer & IT, Accounting & Finance
Jobs at:
Uganda Electricity Distribution Company Limited (UEDCL)
Deadline of this Job:
Sunday, November 15 2026
Duty Station:
Kampala | Kampala
Summary
Date Posted: Tuesday, November 3 2026, Base Salary: Not Disclosed
JOB DETAILS:
Reports To
Senior Internal Auditor ICT
Mission & Objectives
To support the execution of risk-based ICT audits by assessing information systems, technology operations, cybersecurity controls, IT governance processes and related controls to determine their adequacy, effectiveness and compliance with organizational policies, applicable laws, regulations and recognized ICT standards.
The role is responsible for carrying out ICT audit procedures, identifying ICT risks and control weaknesses, documenting audit evidence and contributing to practical recommendations aimed at enhancing the security, reliability, integrity, availability and efficiency of the organization’s ICT systems and operations.
Job Purpose & Impact
The job holder contributes to effective ICT governance, risk management and internal controls by providing independent assurance over UEDCL’s information systems and technology operations.
Through timely identification and reporting of ICT risks, control weaknesses and compliance gaps, the position supports the organization in reducing exposure to cybersecurity incidents, data loss, system failures, unauthorized access and operational disruptions while improving the reliability and effectiveness of ICT services supporting UEDCL objectives.
Working Environment
- Office-based environment with regular interaction with ICT personnel, system owners, process owners and other organizational stakeholders.
- This role may require access to ICT infrastructure, systems, data centres and operational locations for purposes of conducting audit procedures.
- May require travel to different organizational locations or duty areas as necessary to undertake ICT audit assignments.
- Requires continuous professional development to remain abreast of emerging technologies, cybersecurity risks, ICT regulations and professional auditing practices.
Key Responsibilities
- Support the planning and execution of risk-based ICT audits in accordance with the approved Internal Audit Annual Operational Plan, audit methodologies and established professional standards.
- Assess adherence to recognized ICT governance, risk and security frameworks and good practices, including COBIT, ISO 27001 and other relevant standards as applicable.
- Perform audit reviews of ICT infrastructure, systems, applications, databases, networks and technology-related processes to assess the adequacy, effectiveness and efficiency of controls.
- Assess ICT risks and controls relating to cybersecurity, access management, data protection, system availability, change management, IT operations, disaster recovery, business continuity and information integrity.
- Prepare complete and accurate audit working papers documenting audit procedures performed, evidence obtained, analyses undertaken and conclusions reached.
- Support the preparation of ICT audit reports by providing well-supported findings, conclusions and practical recommendations to strengthen ICT controls and risk management.
- Follow up agreed ICT audit recommendations and management action plans and validate the implementation status of corrective actions.
- Maintain proper custody, confidentiality and integrity of audit information and evidence obtained during audit assignments.
- Maintain awareness of emerging ICT risks, cybersecurity threats, technologies and regulatory developments and apply relevant knowledge during ICT audit engagements.
- Provide input into ICT risk assessments and the development of ICT audit programmes based on knowledge gained from previous audits, emerging risks and changes within the ICT environment.
- Collaborate effectively with other Internal Audit team members and relevant stakeholders during integrated, operational, financial and ICT-related audit assignments.
- Perform any other ICT audit-related duties assigned by the Senior Internal Auditor ICT or Internal Audit management in accordance with the mandate of the Internal Audit function.
Eligibility & Requirements
Qualifications, experience, and skills needed for this role.
Education
- Bachelor’s degree in Computer Science, Information Technology, Information Systems, Computer Engineering, Cybersecurity or a related field.
- Professional certification or progress towards obtaining a relevant certification such as Certified Information Systems Auditor (CISA), Certified in Cybersecurity (CC), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or equivalent is an added advantage.
- Affiliate membership to a relevant professional body is desirable.
Experience
- Minimum of three (3) years of relevant experience in ICT auditing, information technology, cybersecurity, IT risk management, information systems controls or a related field.
- Practical knowledge of ICT controls, cybersecurity principles, IT governance and information systems risk management.
- Experience in the use of data analytics or computer-assisted audit techniques is an added advantage.
- Experience within the utility, energy or other regulated sector is an added advantage.
Required Competencies
- Knowledge of ICT audit methodologies and risk-based internal auditing principles.
- Understanding of IT governance and control frameworks such as COBIT, ISO 27001, NIST and other relevant standards.
- Knowledge of cybersecurity risks and controls.
- Understanding of IT general controls, including User access and identity management; Change management; IT operations; Backup and recovery; Disaster recovery and business continuity; Incident and problem management; and Information security management.
- Basic understanding of application controls, databases, operating systems, networks and cloud computing environments.
- Ability to use data analytics and computer-assisted audit tools to support audit testing.
- Ability to evaluate ICT processes, identify control weaknesses and recommend practical corrective actions.
- Ability to prepare clear, complete and properly referenced audit working papers.
- Good understanding of relevant ICT policies, laws, regulations and data protection requirements.
Behavioural Competencies
- Strong analytical and critical-thinking skills.
- High attention to detail and accuracy.
- Strong problem-solving ability.
- Good written and verbal communication skills.
- Ability to prepare clear and concise audit observations and reports.
- Good interpersonal and stakeholder-engagement skills.
- Ability to work effectively both independently and as part of an audit team.
- Ability to manage assigned tasks and deliver within agreed timelines.
- High level of integrity, professional ethics and confidentiality.
- Willingness and ability to continuously learn and adapt to emerging technologies, cybersecurity threats and ICT risks.
- Objectivity, professional scepticism and sound judgement in carrying out audit assignments.
Work Hours: 8
Experience in Months: 36
Level of Education: bachelor degree
Job application procedure
Deadline: 15/11/2026
|