Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya
Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya
BackgroundCapital Sacco originated from the Union Banking Section (UBS) of the then giant Meru Central Farmers Co-operative Union (MCFCU) in 1974 offering savings and credit services to its members.
The MCFCU drew its members from farmers belonging to various primary marketing societies who were mostly from coffee and tea farmers. On 3rd February 2005 following the split of the giant Meru Central Farmers Co-operative Union (MCFCU) into
independent business units, the Union Banking Section was transformed into a Rural Sacco
and was duly registered under the Co-operative Societies Act as a legal entity.
During registration it was called Meru Farmers Sacco but the name was later changed to Capital
Sacco ltd in the year 2012 after rebranding and currently has 15 branches.
The Sacco desires to engage the services of an information communication Technology (ICT) consulting firm to conduct an audit of its ICT systems and processes in order to succeed in achieving its strategic plan.
Objectives
The Systems audit is planned to answer the following key issues:
Are there adequate general System controls and application controls to mitigate
the System risks facing the organization?
Identify control deficiencies and propose ways of addressing these deficiencies
Assess system development/configuration management controls to provide reasonable assurance that the system operates as intended.
Access and other general controls to prevent unauthorized access.
Scope
Information Systems Audit should cover entire Information Systems Infrastructure which
includes Servers & other hardware items, Operating Systems, Databases, Application Systems, Technologies, Networks, Facilities, and Process & People interacting with the systems: The following is the breakdown.
Power system Audit.
Data Centre
Data Recovery Centre
CBS endpoint applications, operating systems, Servers, Interfaces, Network & Other
Devices,
ATM Switch
Agency and MSACCO Banking
Policy, procedures, standard practices and other regulatory requirements.
Physical and environmental security
Systems, Application and database security.
Third party products and interfaces.
Penetration test/ Intrusion detection
Available Firewall/antivirus capacity
System architecture and its availability of security controls such as audit trails etc
Others Areas of Interest
Testing disaster recovery procedures and business continuity planning
Data integrity assessment
Test information confidentiality
Logical and physical security
Susceptibility to fraud
Security policy and standards
Access control
Personnel security
Identify efficient security audit tools and techniques
Identify existing controls and gaps from the required controls
Deliverables and Outcome
The Sacco expects the audit to be completed in not more than one month. Draft report
highlighting findings, exposure/risk, impact and recommendations will be presented to
management for review and comments.
Requirements
Bidders must submit the following requirements.
Letter of expression of interest – the letter should contain the firm’s full address and
also indicate clearly whether the firm wants to bid alone or in consortium.
A joint venture agreement clearly showing the lead
partner where firms have come together in a joint venture
Demonstration of the firms’ compliance with relevant statutory (business
registration, tax compliance, etc) and professional (current registration/letters of
good standing with relevant professional body) requirements. (Mandatory)
A brief profile of the firm including description of the firm (articles and
memorandum of Association, Certificate of incorporation etc).
A description of the relevant past experience of the firm in carrying out at least
three (3) similar in nature assignments in the last five (5) years. The bidder must be conversant with ICT requirements for financial service industry.
A brief description of the methodologies to be used to successfully undertake the audit.
Reference letter from the previous/current clients of the same or related services.
Availability of appropriate skills among staff, provide CV’s of key staff proposed for
the assignment.
Audited financial reports for the last three years
Certified copy of valid single business permit
Declaration containing the applicant’s expression of interest and confirmation on
the authenticity and accuracy of information so provided.
Short listing
A shortlist of individual professional consultants for the assignment will be prepared based on the detailed certified Curriculum Vitae and Testimonials submitted.
The Evaluation Criteria
The Criteria for selection to the shortlist will be based on Provision of mandatory
documents – mandatory; demonstrated Consultant’s academic and professional backgrounds – 40%; demonstrated work experience in relation to the assignment – 40%; and Proposed outline of the audit approach and timelines – 20%
How to Apply
Interested and eligible candidates may download the notice of (EOI) from our website.
Only individuals pre-qualified under this procedure will be invited to submit their technical
and financial proposals under the Request for Proposal (RFP).
Submission
EOI documents completed in English are to be enclosed in plain sealed envelopes marked
“CSL/EOI/01/2019: Expression of Interest for ICT Systems Audit Consultancy Services” and be
deposited in the Tender Box at Capital Sacco Ltd, Head Office, MACCU Building Room 316,
addressed to:
The Chief Executive Officer,
Capital Sacco Ltd,
P.O Box 1479-60200,
Meru.
So as to be received on or before 23rd January 2019 at 11.00am. Bids will be opened
immediately thereafter at the Board Room in the presence of bidders/their representatives
who wish to attend
For more information and job application details, see; Capital Sacco Request for Expression of Interest - ICT Systems Audit Consultancy Services Jobs in Kenya
Find jobs in Kenya. Jobs - Kenya jobs. Search our career portal & find the latest Kenyan job positions, career opportunities & jobs in Kenya.
Jobs in Kenya - banking jobs, IT jobs, accounting jobs, NGO jobs, business administration, ICT, UN jobs, procurement jobs, education jobs, hospital jobs, human resources jobs, engineering, teaching jobs, and other careers in Kenya.
Find your dream job from 1000s of vacancies in Kenya posted and updated daily - click here!
Click here to post comments
Join in and write your own page! It's easy to do. How? Simply click here to return to Jobs Kenya.