The Zambia Medicines and Medical Supplies Agency (AGENCY) is a Statutory Government Agency established by the ZAMMSA Act No.9 of 2009 and charged with the procurement of medicines and medical supplies, storage of medicines and medical supplies and distribution of medicines and medical supplies to all public facilities in Zambia. The Agency’s responsibility is carried out on behalf of Government, ensuring that essential drugs and medical supplies are available and accessible to the public. ZAMMSA ensures quality and safety of the distributed medical products through strict quality assurance protocols, including inspections and compliance with regulatory requirement.

The Agency seeks applications from suitably qualified and experienced Zambian Nationals to fill the under listed positions at ZAMMSA:

21. INTERNAL AUDITOR – ICT AUDITS (x 02)

Grade: ZMS 06

Reports to: Manager – Internal Audit & Risk

Main Job Purpose

To undertake the assessment and evaluation of the effectiveness of the information systems, technology infrastructure and data security measures in order to ensure compliance with internal policies, industry standards and regulatory requirements.

Main Responsibilities

The main duties and responsibilities for this post are but not limited to the following:

1. ICT Audit Planning and Execution

• Develops and implements a comprehensive ICT audit plan aligned with organisational objectives in order to assess the effectiveness of ICT controls, systems and processes.

2. ICT Risk Assessment

• Identifies, evaluates and profiles ICT-related risks and vulnerabilities in order to analyse their potential impact on the Agency’s operations, data integrity and confidentiality and facilitate the implementation of mitigation measures.

3. ICT Governance, Compliance and Data Privacy

• Assesses governance systems in order to ensure adherence to ICT governance frameworks, policies, procedures, regulatory requirements and industry standards such as ISO, NIST and GDPR.
• Assesses compliance with data privacy laws and regulations in order to facilitate sound data handling practices, data retention policies and data protection measures.

4. Information Security, Systems and Infrastructure Audits

• Evaluates the effectiveness of information security controls, including access controls, data encryption, network security and vulnerability management, in order to provide assurance to management on ICT security.
• Reviews the adequacy of controls in the system development lifecycle and change management processes in order to ensure proper documentation, testing and implementation of ICT changes.
• Evaluates the reliability, availability and performance of ICT infrastructure, including servers, networks, databases and cloud services, in order to provide assurance on business continuity.
• Assesses the risks and benefits of new and emerging technologies such as IoT, AI and blockchain in order to provide assurance on their secure implementation and integration.

5. Audit Reporting and Continuous Monitoring

• Prepares comprehensive audit reports detailing findings, recommendations and corrective actions in order to communicate audit results to senior management, ICT stakeholders and audit committees.
• Establishes mechanisms for the continuous monitoring of ICT controls and processes in order to facilitate the implementation of corrective measures.

6. Budgeting and Performance Management

• Contributes to the timely preparation of unit budgets in order to facilitate the acquisition of resources and programme implementation.
• Develops individual work plans and participates in the Performance Management System (PMS) in order to monitor, evaluate and enhance performance.

PERSONAL ATTRIBUTES

• Integrity
• Teamwork
• Results-oriented
• Innovation

SKILLS REQUIRED

• Metrics-driven approach to work
• Analytical skills
• Interpersonal skills
• Good computer skills
• Ability to write clear technical, operational and analytical papers
• Ability to communicate fluently in English

MINIMUM QUALIFICATIONS AND EXPERIENCE

• Full Grade 12 School Certificate
• Bachelor’s Degree in Accountancy, CA/ACCA/CIMA or its equivalent
• Certification in ICT Audits will be an added advantage
• Minimum 2 years’ relevant work experience

• Develops and implements a comprehensive ICT audit plan aligned with organisational objectives in order to assess the effectiveness of ICT controls, systems and processes.
• Identifies, evaluates and profiles ICT-related risks and vulnerabilities in order to analyse their potential impact on the Agency’s operations, data integrity and confidentiality and facilitate the implementation of mitigation measures.
• Assesses governance systems in order to ensure adherence to ICT governance frameworks, policies, procedures, regulatory requirements and industry standards such as ISO, NIST and GDPR.
• Assesses compliance with data privacy laws and regulations in order to facilitate sound data handling practices, data retention policies and data protection measures.
• Evaluates the effectiveness of information security controls, including access controls, data encryption, network security and vulnerability management, in order to provide assurance to management on ICT security.
• Reviews the adequacy of controls in the system development lifecycle and change management processes in order to ensure proper documentation, testing and implementation of ICT changes.
• Evaluates the reliability, availability and performance of ICT infrastructure, including servers, networks, databases and cloud services, in order to provide assurance on business continuity.
• Assesses the risks and benefits of new and emerging technologies such as IoT, AI and blockchain in order to provide assurance on their secure implementation and integration.
• Prepares comprehensive audit reports detailing findings, recommendations and corrective actions in order to communicate audit results to senior management, ICT stakeholders and audit committees.
• Establishes mechanisms for the continuous monitoring of ICT controls and processes in order to facilitate the implementation of corrective measures.
• Contributes to the timely preparation of unit budgets in order to facilitate the acquisition of resources and programme implementation.
• Develops individual work plans and participates in the Performance Management System (PMS) in order to monitor, evaluate and enhance performance.

• Metrics-driven approach to work
• Analytical skills
• Interpersonal skills
• Good computer skills
• Ability to write clear technical, operational and analytical papers
• Ability to communicate fluently in English

• Full Grade 12 School Certificate
• Bachelor’s Degree in Accountancy, CA/ACCA/CIMA or its equivalent
• Certification in ICT Audits will be an added advantage