INTERNAL AUDITOR

About Us

CIC Insurance Group is a leading insurance and financial services organization with over five decades of experience supporting individuals, families, cooperatives, SMEs, and corporates to achieve financial security.

The Group offers a diversified portfolio spanning general insurance, life assurance, microinsurance, asset management, and investment solutions, with operations in Kenya, Uganda, South Sudan, and Malawi, and is listed on the Nairobi Securities Exchange.

Our tagline, “We Keep Our Word,” reflects our unwavering commitment to integrity, transparency, and delivering on our promises to clients, regulators, partners, and communities. CIC is committed to innovation, digital transformation, and prudent risk management to deliver sustainable value across its markets.

About the Role

Reporting to the Director, Internal Audit and Administrative wise, the Internal Auditor role will provide independent and objective assurance on the effectiveness of the organization’s governance, risk management, and internal control processes. The Internal Auditor evaluates operations, identifies risks, ensures compliance with policies and regulations, and recommends improvements to enhance operational efficiency and safeguard organizational assets.

PRIMARY RESPONSIBILITIES:

Internal Audit Planning and Execution

• Participate in risk assessments and contribute to the development of the annual internal audit work plan.
• Develop and implement audit assignments in line with the approved annual Internal Audit Plan. Conduct risk-based audits across underwriting, claims, finance, investments, procurement, HR, IT, branches and other business functions.
• Review business processes, transactions, systems and controls to assess their adequacy, effectiveness and compliance.
• Develop audit objectives, scope, risk and control matrices, audit programmes, working papers and testing procedures for assigned audits.
• Perform substantive and compliance testing and obtain sufficient, reliable audit evidence.
• Identify control gaps, process inefficiencies, financial irregularities and potential risks.
• Prepare clear and evidence-based audit findings and recommendations.

Risk and Internal Control Assessment

• Assess the effectiveness of the company’s internal control environment.
• Identify emerging and existing operational, financial, compliance and strategic risks.
• Evaluate whether identified controls adequately mitigate relevant risks.
• Recommend practical and sustainable control improvements.
• Monitor implementation of agreed risk mitigation and control improvement measures.
• Use data analytics as an integral part of audit planning, risk assessment, testing and continuous monitoring, including analysis of large and complex datasets.
• Develop data-driven audit tests to identify exceptions, trends, anomalies, duplicate transactions, control breaches and other indicators of risk or potential fraud.
• Use appropriate analytical and visualization tools, including advanced Excel and relevant tools such as IDEA and Power BI, or equivalent, where applicable.

Financial and Operational Audits

• Review financial transactions, records and reports for accuracy, completeness and compliance.
• Audit revenue, expenditure, payroll, procurement, receivables, payables and other financial processes.
• Review underwriting and claims transactions to identify errors, control weaknesses, leakage and potential fraud.
• Conduct branch and departmental audits as assigned.
• Verify the proper safeguarding and utilization of company assets.

Audit Follow-up

• Maintain an updated audit issues and recommendations tracker.
• Conduct periodic follow-up reviews to assess implementation of agreed management actions.
• Escalate overdue or high-risk audit issues to the appropriate authority.
• Validate evidence provided by management before closing audit findings.
• Support internal and external audits and regulatory reviews.

Advisory and Continuous Improvement

• Provide objective advisory support on new processes, systems and control improvements without compromising audit independence.
• Participate in process reviews and risk assessments where required.
• Identify opportunities to improve operational efficiency, cost management and internal controls.
• Keep abreast of emerging audit, risk, technology and insurance industry practices.

Who We’re Looking For

Academic & Professional Qualifications

• Bachelor’s degree in Accounting, Finance, Business Administration, Economics, Risk Management or a related discipline.
• Professional qualification such as CIA, ACCA, CPA, CISA or equivalent is highly desirable.
• Membership of a recognized professional accounting/auditing body is an added advantage.

Experience

• Minimum of 3 years’ experience in internal audit, external audit, risk, compliance or financial control.
• Experience in the insurance or financial services sector is an added advantage.
• Demonstrable experience in risk-based auditing, internal controls, compliance reviews and audit reporting.