Background

This role is within the Tanzania Electric Supply Company Limited (TANESCO), a key utility provider. The ICT Officer Grade II will be responsible for ensuring the integrity and security of the company's information and communication technology systems through rigorous auditing processes.

Duties and Responsibilities

The primary duties include conducting audits of ICT systems, applications, networks, databases, and other IT infrastructure. The officer will assess the adequacy and effectiveness of ICT internal controls, policies, procedures, and security measures. Reviewing information systems development, implementation, modification, and maintenance processes to ensure compliance with approved standards and procedures is also a key responsibility. Furthermore, the role involves evaluating access controls, user privileges, authentication mechanisms, and segregation of duties within ICT systems. Reviewing information security, data protection, backup, disaster recovery, and business continuity arrangements are critical. The officer will follow up on the implementation of ICT audit recommendations and report on outstanding issues. Preparing audit working papers, findings, reports, and recommendations in accordance with approved audit procedures is essential. Participation in investigations of ICT-related incidents, control weaknesses, system irregularities, and suspected unauthorized access is expected. Providing professional advice on ICT governance, risk management, internal controls, and information security will be part of the role. Maintaining proper records of audit activities, findings, evidence, and follow-up actions is required. Compliance with professional standards, information security requirements, occupational health and safety requirements, and Company policies and procedures is mandatory. Performing any other related duties as may be assigned by the supervisor is also included.

Qualifications and Requirements

Candidates must hold a Bachelor's Degree in Information Technology, Computer Science, Information Systems, Computer Engineering, Cybersecurity, Accounting and Finance, Auditing, or equivalent qualifications from a recognized institution. Additionally, a Certified Information Systems Auditor (CISA) certification or equivalent professional certification in Information Systems Audit is required.

Experience Needed

While specific years of experience are not explicitly stated, the 'Grade II' designation and the requirement for professional certifications suggest a need for some relevant practical experience in ICT auditing and related fields.

• Conducts audits of ICT systems, applications, networks, databases and other information technology infrastructure.
• Asses the adequacy and effectiveness of ICT internal controls, policies, procedures and security measures.
• Reviews information systems development, implementation, modification and maintenance processes to ensure compliance with approved standards and procedures.
• Evaluates access controls, user privileges, authentication mechanisms and segregation of duties within ICT systems.
• Reviews information security, data protection, backup, disaster recovery and business continuity arrangements.
• Follows up implementation of ICT audit recommendations and reports on outstanding issues.
• Prepares audit working papers, findings, reports and recommendations in accordance with approved audit procedures.
• Participates in investigations of ICT-related incidents, control weaknesses, system irregularities and suspected unauthorized access.
• Provides professional advice on ICT governance, risk management, internal controls and information security.
• Maintains proper records of audit activities, findings, evidence and follow-up actions.
• Complies with professional standards, information security requirements, occupational health and safety requirements and Company policies and procedures.
• Performs any other related duties as may be assigned by the supervisor.

• ICT systems auditing
• Internal controls assessment
• Policy and procedure review
• Security measures evaluation
• Information systems development lifecycle review
• Access control evaluation
• User privilege management
• Authentication mechanisms
• Segregation of duties
• Information security
• Data protection
• Backup and disaster recovery
• Business continuity planning
• Audit recommendation follow-up
• Audit working paper preparation
• Audit reporting
• ICT incident investigation
• Control weakness analysis
• System irregularity investigation
• Unauthorized access investigation
• ICT governance advisory
• Risk management advisory
• Internal controls advisory
• Information security advisory
• Record keeping
• Professional standards compliance
• Information security requirements compliance
• Occupational health and safety compliance
• Company policies and procedures compliance

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Computer Engineering, Cybersecurity, Accounting and Finance, Auditing, or equivalent qualifications from a recognized institution.
• Certified Information Systems Auditor (CISA) certification or equivalent professional certification in Information Systems Audit.