Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya

Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya


Background

Capital Sacco originated from the Union Banking Section (UBS) of the then giant Meru Central Farmers Co-operative Union (MCFCU) in 1974 offering savings and credit services to its members.

The MCFCU drew its members from farmers belonging to various primary marketing societies who were mostly from coffee and tea farmers. On 3rd February 2005 following the split of the giant Meru Central Farmers Co-operative Union (MCFCU) into
independent business units, the Union Banking Section was transformed into a Rural Sacco
and was duly registered under the Co-operative Societies Act as a legal entity.

During registration it was called Meru Farmers Sacco but the name was later changed to Capital
Sacco ltd in the year 2012 after rebranding and currently has 15 branches.

The Sacco desires to engage the services of an information communication Technology (ICT) consulting firm to conduct an audit of its ICT systems and processes in order to succeed in achieving its strategic plan.

Objectives

The Systems audit is planned to answer the following key issues:

  • Are there adequate general System controls and application controls to mitigate
    the System risks facing the organization?
  • Identify control deficiencies and propose ways of addressing these deficiencies
  • Assess system development/configuration management controls to provide reasonable assurance that the system operates as intended.
  • Access and other general controls to prevent unauthorized access.

    Scope

  • Information Systems Audit should cover entire
  • Information Systems Infrastructure which
    includes Servers & other hardware items, Operating Systems, Databases, Application Systems, Technologies, Networks, Facilities, and Process & People interacting with the systems: The following is the breakdown.
  • Power system Audit.
  • Data Centre
  • Data Recovery Centre
  • CBS endpoint applications, operating systems, Servers, Interfaces, Network & Other
    Devices,
  • ATM Switch
  • Agency and MSACCO Banking
  • Policy, procedures, standard practices and other regulatory requirements.
  • Physical and environmental security
  • Systems, Application and database security.
  • Third party products and interfaces.
  • Penetration test/ Intrusion detection
  • Available Firewall/antivirus capacity
  • System architecture and its availability of security controls such as audit trails etc

    Others Areas of Interest

  • Testing disaster recovery procedures and business continuity planning
  • Data integrity assessment
  • Test information confidentiality
  • Logical and physical security
  • Susceptibility to fraud
  • Security policy and standards
  • Access control
  • Personnel security
  • Identify efficient security audit tools and techniques
  • Identify existing controls and gaps from the required controls

    Deliverables and Outcome

  • The Sacco expects the audit to be completed in not more than one month. Draft report
    highlighting findings, exposure/risk, impact and recommendations will be presented to
    management for review and comments.

    Requirements

    Bidders must submit the following requirements.

  • Letter of expression of interest – the letter should contain the firm’s full address and
    also indicate clearly whether the firm wants to bid alone or in consortium.
  • A joint venture agreement clearly showing the lead
    partner where firms have come together in a joint venture
  • Demonstration of the firms’ compliance with relevant statutory (business
    registration, tax compliance, etc) and professional (current registration/letters of
    good standing with relevant professional body) requirements. (Mandatory)
  • A brief profile of the firm including description of the firm (articles and
    memorandum of Association, Certificate of incorporation etc).
  • A description of the relevant past experience of the firm in carrying out at least
    three (3) similar in nature assignments in the last five (5) years. The bidder must be conversant with ICT requirements for financial service industry.
  • A brief description of the methodologies to be used to successfully undertake the audit.
  • Reference letter from the previous/current clients of the same or related services.
  • Availability of appropriate skills among staff, provide CV’s of key staff proposed for
    the assignment.
  • Audited financial reports for the last three years
  • Certified copy of valid single business permit
  • Declaration containing the applicant’s expression of interest and confirmation on
    the authenticity and accuracy of information so provided.

    Short listing

  • A shortlist of individual professional consultants for the assignment will be prepared based on the detailed certified Curriculum Vitae and Testimonials submitted.
  • The Evaluation Criteria
  • The Criteria for selection to the shortlist will be based on Provision of mandatory
    documents – mandatory; demonstrated Consultant’s academic and professional backgrounds – 40%; demonstrated work experience in relation to the assignment – 40%; and Proposed outline of the audit approach and timelines – 20%

    How to Apply

  • Interested and eligible candidates may download the notice of (EOI) from our website.
  • Only individuals pre-qualified under this procedure will be invited to submit their technical
    and financial proposals under the Request for Proposal (RFP).

    Submission

  • EOI documents completed in English are to be enclosed in plain sealed envelopes marked
    “CSL/EOI/01/2019: Expression of Interest for ICT Systems Audit Consultancy Services” and be
    deposited in the Tender Box at Capital Sacco Ltd, Head Office, MACCU Building Room 316,
    addressed to:

    The Chief Executive Officer,
    Capital Sacco Ltd,
    P.O Box 1479-60200,
    Meru.


  • So as to be received on or before 23rd January 2019 at 11.00am. Bids will be opened
    immediately thereafter at the Board Room in the presence of bidders/their representatives
    who wish to attend

  • For more information and job application details, see; Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya

    Find jobs in Kenya. Jobs - Kenya jobs. Search our career portal & find the latest Kenyan job positions, career opportunities & jobs in Kenya.

    Jobs in Kenya - banking jobs, IT jobs, accounting jobs, NGO jobs, business administration, ICT, UN jobs, procurement jobs, education jobs, hospital jobs, human resources jobs, engineering, teaching jobs, and other careers in Kenya.

    Find your dream job from 1000s of vacancies in Kenya posted and updated daily - click here!

  • Click here to post comments

    Join in and write your own page! It's easy to do. How? Simply click here to return to Jobs Kenya.