EXPRESSION OF INTEREST (EOI)

INVITATION FOR APPLICATIONS: PROVISION OF INTERNAL AUDIT SERVICES

Reference No: IB/EOI/IA/2026/01
Location: Nairobi, Kenya
Issue Date: 04th November 2026
Submission Deadline: Friday, 13 November, 2026

1.  Background

A leading investment bank regulated by the Capital Markets Authority (CMA) of Kenya is seeking the services of a competent internal auditor. The Bank offers a comprehensive range of financial services including corporate finance, wealth management, and securities trading. The client base includes retail, high networth and corporate customers.

In compliance to regulatory requirements and to strengthen our risk management frameworks, internal control mechanisms, and corporate governance structures in alignment with regulatory guidelines and international best practices, the Investment Bank invites applications from eligible Consulting Firms to submit Expressions of Interest (EOI) to provide Internal Audit Services.

2.  Scope of Work

The successful firm will be expected to execute an independent and objective assessment of the internal control function designed to add value and improve the Bank's operations.

The key responsibilities will include:

1. Risk-Based Audit Plan: Formulating and executing a multi-year and annual risk-based internal audit plan approved by the Board Audit
2. Regulatory Compliance: Reviewing compliance with statutory and regulatory mandates, including the Capital Markets Act, CMA Regulations, Proceeds of Crime and Anti-Money Laundering (POCAMLA) requirements, and other relevant tax laws and
3. Internal Controls Assessment: Evaluating the adequacy, effectiveness, and efficiency of internal control systems across business units and departments.
4. Governance & Risk Management: Assessing the Bank's governance structure and risk management policies to ensure proper oversight and risk.
5. Reporting: Submitting quarterly audit reports directly to the Board Audit Committee, featuring actionable recommendations, management response action plans, and follow- up

3. Eligibility and Minimum Qualifications Applications are open to Audit/Consulting Firms. Requirements for Consulting/Audit Firms
4. Registration: Registered firm with valid practicing certificates from the Institute of Certified Public Accountants of Kenya (ICPAK) and the Institute of Internal
5. Experience: Minimum of five years of demonstrable experience delivering internal or external audit services to financial institutions, preferably CMA-regulated entities, commercial banks, or asset management
6. Team Qualification: Engagement leads and key personnel must be active ICPAK members in good standing, with relevant certifications (e.g., CPA(K), CIA, CISA, or CFE).
7. Compliance: Valid Tax Compliance Certificate (TCC) from the Kenya Revenue Authority (KRA).

3.  Submission Requirements

Interested applicants must submit an EOI package containing the following:

1. Cover Letter: Expressing interest and detailing the applicant's
   1. Profile of the Applicant; Corporate profile highlighting relevant experience, firm capabilities, and CVs of key audit team members.
2. Track Record: Summary of at least 3 previous relevant engagements in the financial services sector (preferably CMA-regulated firms) conducted within the last 5 years, including verifiable reference contacts.

4. Statutory Documents:

1. Copy of Certificate of Registration (for Firms).
2. Copies of ICPAK Certificates / Practicing Licenses (Firm and/or Key Personnel / Individual).
3. Copy of KRA PIN and valid KRA Tax Compliance

Note: Financial proposals (fees) are not required at this stage. Shortlisted candidates will be issued the complete Request for Proposals (RFP) document.

5.  Submission Details

Submissions should be delivered electronically via email:

Email to, This email address is being protected from spambots. You need JavaScript enabled to view it.

Deadline for Submission: [13, November, 2026]

6.  Selection Process

Responses will be evaluated based on qualifications, relevant experience in CMA-regulated institutions, and technical capability. Only shortlisted Firms will be contacted to receive the Request for Proposals (RFP) and invited to submit detailed technical and financial proposals.