Solomon Simiyu

Solomon is a Manager in the A&K’s Forensics and Investigations department. He has over 12 years’ extensive experience in internal and external audit, governance, risk and compliance. Over the years, Solomon has worked as a project lead on engagements involving identification, analysis, evaluation and management of enterprise risks in various industries, with a primary focus on Information Technology Risks. His experience in IT risk advisory includes assessment of risks related to IT systems and identification of their impact on financial reporting, business processes and internal controls.

He has also advised organizations in addressing complex matters relating to the development of Enterprise Risk Management strategies and frameworks, business process controls, risk and compliance assessments, development of sustainability strategies, assurance and reporting across a wide variety of industries and sectors.

• Institute of Internal Auditors
• ISACA

2018: Certified in Risk and Information Systems Control (CRISC)

2017: Certified Information Systems Auditor (CISA)

2008: B.Sc. Computer Science – Moi University

Jul 2021 – Date: Manager, A&K Forensics, Risk and Compliance

Sept 2019 – Dec 2021: Manager, Risk Advisory, Deloitte East Africa

Sept 2017 – Aug 2019: Advisory Manager – Risk and Financial Advisory, Deloitte & Touche LLP, USA

Sept 2016 – Aug 2017: Manager – Risk Advisory, Deloitte East Africa

Sept 2015 – Aug 2016: Assistant Manager – Risk Advisory, Deloitte East Africa

Sept 2014 – Aug 2015: Senior Consultant – Risk Advisory, Deloitte East Africa

Sept 2011 – Aug 2014: Consultant – Risk Advisory, Deloitte East Africa

Sept 2008 – Aug 2011: Associate – Audit & Assurance, Deloitte East Africa

Prior to joining A&K

Assurance

Clients served include: Pure Storage, Chegg, GTBank, WPP Scangroup, Nairobi Hospital, Sofgen Africa, Nampak Kenya, Acceler Global / Transglobal, Financial Sector Deepening Trust, Old Mutual Life Assurance, Kenya Women Microfinance Bank, Alliance One Tobacco, World Agroforestry Centre, Standard Chartered Bank.

• Scoping, planning, and executing Information Technology audits with an emphasis on general IT and application controls as they relate to internal control over financial reporting, in line with industry best practice standards and frameworks including COSO, COBIT, NIST among others. Execution on projects includes:
  • leading teams to coordinate with process owners;
  • identify and test controls;
  • validate process documentation;
  • analyse IT and business information to identify improvement opportunities;
  • reporting on such opportunities to those charged with governance; and
  • continuous exposure and training on emerging technologies and technology risks that feed into future development of IT risk assessments plans and audit programs.

Internal Audit

Clients served include: ZEP-RE (PTA Re-insurance), Development Bank Limited, East Africa Cables Limited and Coca – Cola Sabco North East Africa Division.

• Leading teams to conduct audits that aim to assess whether the client’s system of internal control is adequate for achieving management’s objectives in an efficient and orderly manner and improve the control environment of the client’s organization, while optimizing operational efficiency.

Project of this nature typically include;

• identifying and reporting to management actual or potential weaknesses in internal controls where they exist;
• reviewing the extent of compliance with established policies, plans and procedures;
• recommending feasible ways of remedy; and
• coordinating with management to document and follow up on detailed action plans for remediation.

Enterprise Risk Management, Risk Assessment and mitigation

Clients served include: Norwegian Ministry of Foreign Affairs, Water Services Trust Fund, Financial Sector Deepening Trust Kenya (FSD K), Safaricom, Ingredion Inc. Plc., Regional Centre on Small Arms & Light Weapons (RECSA), Oxfam GB Somali Program, International Finance Corporation (IFC), United States Agency for International Development (USAID) Kenya, United Nations Development Program (UNDP)

• Providing guidance to client leadership to understand risk appetite and tolerance for all risk areas, and define appropriate Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to guide the analysis;
• Applying an understanding of several risk factors (credit, market, operational, regulatory) to identify and assess risks;
• Leading teams through the development and implementation of risk assessment processes, leveraging both qualitative and quantitative techniques that lead to a comprehensive view of targeted risk areas; and
• Designing and developing frameworks, tools and processes to enable effective risk responses to mitigate identified risks.

Sustainability

Clients served include: Safaricom, KCB Bank.

• Supporting clients in addressing sustainability issues and compliance reporting, by aligning sustainability strategy and processes with the client’s business strategy, stakeholders’ expectations and relevant regulations;
• Advising clients on development, monitoring, assurance and reporting on sustainability missions that address key stakeholders’ social, ethical, environmental and other non-financial needs; and
• Working with the Sustainable Finance Initiative principles – a set of guiding principles drawn and harmonized from several global best practices in balancing business goals with the economy’s development priorities and socioenvironmental concerns, adopted by the Kenya Bankers Association in partnership with the International Finance Corporation – IFC.