Internal Auditor – ICT Audits (x2)

EMPLOYMENT OPPORTUNITIES The Zambia Medicines and Medical Supplies Agency (AGENCY) is a Statutory Government Agency established by the ZAMMSA Act No.9 of 2009 and charged with the procurement of medicines and medical supplies, storage of medicines and medical supplies and distribution of medicines and medical supplies to all public facilities in Zambia. The Agency’s responsibility is carried out on behalf of Government, ensuring that essential drugs and medical supplies are available and accessible to the public. ZAMMSA ensures quality and safety of the distributed medical products through strict quality assurance protocols, including inspections and compliance with regulatory requirement. The Agency seeks applications from suitably qualified and experienced Zambian Nationals to fill the under listed positions at ZAMMSA: 21. INTERNAL AUDITOR – ICT AUDITS (x 02) Grade: ZMS 06 Reports to: Manager – Internal Audit & Risk Main Job Purpose To undertake the assessment and evaluation of the effectiveness of the information systems, technology infrastructure and data security measures in order to ensure compliance with internal policies, industry standards and regulatory requirements. Main Responsibilities The main duties and responsibilities for this post are but not limited to the following: 1. ICT Audit Planning and Execution – Develops and implements a comprehensive ICT audit plan aligned with organisational objectives in order to assess the effectiveness of ICT controls, systems and processes. 2. ICT Risk Assessment – Identifies, evaluates and profiles ICT-related risks and vulnerabilities in order to analyse their potential impact on the Agency’s operations, data integrity and confidentiality and facilitate the implementation of mitigation measures. 3. ICT Governance, Compliance and Data Privacy Assesses governance systems in order to ensure adherence to ICT governance frameworks, policies, procedures, regulatory requirements and industry standards such as ISO, NIST and GDPR. Assesses compliance with data privacy laws and regulations in order to facilitate sound data handling practices, data retention policies and data protection measures. 4. Information Security, Systems and Infrastructure Audits Evaluates the effectiveness of information security controls, including access controls, data encryption, network security and vulnerability management, in order to provide assurance to management on ICT security. Reviews the adequacy of controls in the system development lifecycle and change management processes in order to ensure proper documentation, testing and implementation of ICT changes. Evaluates the reliability, availability and performance of ICT infrastructure, including servers, networks, databases and cloud services, in order to provide assurance on business continuity. Assesses the risks and benefits of new and emerging technologies such as IoT, AI and blockchain in order to provide assurance on their secure implementation and integration. 5. Audit Reporting and Continuous Monitoring Prepares comprehensive audit reports detailing findings, recommendations and corrective actions in order to communicate audit results to senior management, ICT stakeholders and audit committees. Establishes mechanisms for the continuous monitoring of ICT controls and processes in order to facilitate the implementation of corrective measures. 6. Budgeting and Performance Management Contributes to the timely preparation of unit budgets in order to facilitate the acquisition of resources and programme implementation. Develops individual work plans and participates in the Performance Management System (PMS) in order to monitor, evaluate and enhance performance. PERSONAL ATTRIBUTES Integrity Teamwork Results-oriented Innovation SKILLS REQUIRED Metrics-driven approach to work Analytical skills Interpersonal skills Good computer skills Ability to write clear technical, operational and analytical papers Ability to communicate fluently in English MINIMUM QUALIFICATIONS AND EXPERIENCE Full Grade 12 School Certificate Bachelor’s Degree in Accountancy, CA/ACCA/CIMA or its equivalent Certification in ICT Audits will be an added advantage Minimum 2 years’ relevant work experience HOW TO APPLY a) All interested persons meeting the above qualifications and experience should send their applications with certified copies of their National Registration Card, academic and professional qualifications, proof of membership of relevant regulatory body (where applicable) latest practicing license (where applicable) and a detailed curriculum vitae with three references including their contact number. b) All professional qualifications must be accredited or recognized and validated by the Zambia Qualifications Authority. c) The closing date for receiving applications Sunday 25th October, 2026 at 17:00hrs. Only short-listed candidates will be contacted. All applications should be addressed and hand delivered to: The Acting Director General Zambia Medicines and Medical Supplies Agency P.O. Box 30207 Plot 6446, Mukwa Road. Lusaka