Rose Avenue Consulting Group is a financial management, strategy and consulting firm that combines deep industry knowledge with specialized expertise in corporate finance, strategy and research. Together with our clients and partnering companies we address our client’s most critical issues and challenges.
We are seeking a Director, Internal Audit for a Tier 2 CBK-regulated bank. This is a senior leadership role responsible for directing and overseeing the bank's internal audit function, delivering the annual audit opinion, and providing assurance to the Board Audit Committee and the CEO on the bank's governance, risk management, and internal control frameworks.
Job Responsibilities
- Own the risk-based Annual Audit Plan — Develop, maintain, and report on a plan aligned to the bank's strategy and CBK supervisory priorities, covering all key risk areas, with quarterly progress updates to the Board Audit Committee.
- Deliver the annual audit opinion — Provide the Board Audit Committee and CEO with an evidence-based opinion on the adequacy and effectiveness of governance, risk management, and internal controls across the entire bank.
- Regulatory assurance, AML/CFT, and CBK engagement — Lead audit coverage of AML/CFT controls, KYC/CDD, and FRC obligations; manage CBK on-site examinations; and ensure all regulatory findings are responded to accurately and on time.
- Digital and technology audit oversight — Provide assurance on cybersecurity, digital banking, mobile money, agency banking, and third-party technology providers, leveraging data analytics to deepen audit coverage.
- Lead & develop the audit function — Build a high-performing team and drive continuous improvement across all audit activities.
Other Requirements
- Educational qualifications — Bachelor's degree in Commerce, Finance, Accounting, or a relevant field as the minimum entry requirement. A Master's degree (MBA or Finance) is an advantage.
- Professional qualifications — CIA and/or CPA-K as essentials, with active ICPAK or IIA Kenya Chapter membership. CISA and CAMS are strongly desirable given the digital banking and AML/CFT audit demands of a Tier 2 bank.
- Senior audit leadership in a regulated bank — Minimum 12 years in internal audit, with at least 5 years at director or senior management level inside a CBK-regulated institution. Board Audit Committee and CBK engagement experience is mandatory.
- CBK regulatory mastery — Deep working knowledge of the Banking Act (Cap. 488), CBK Prudential Guidelines, POCAMLA, the Data Protection Act 2019, and the CBK Corporate Governance Guidelines — particularly the dual reporting line requirement for audit independence.
- Risk-based audit expertise across all risk types — Proven ability to plan and deliver audits spanning credit, operational, technology, liquidity, compliance, and AML/CFT risk, including hands-on experience with digital channels, mobile money, and agency banking.
