Assistant Manager – Internal Controls & Compliance

JOB PURPOSE

The job holder will be responsible for providing independent second-line oversight, challenge and assurance over the Bank’s operational risk and internal control environment across an assigned portfolio of business and support units. The role supports risk assessment, control assurance, operational risk monitoring, issue remediation and risk reporting in line with the Bank’s approved frameworks and requirements.

KEY RESPONSIBILITIES AND ACTIVITIES

KEY RESPONSIILITIES

Coordinate the implementation, maintenance and monitoring of the Bank’s Internal Control Framework.

Conduct and coordinate risk-based control reviews and testing.

Monitor control effectiveness, control weaknesses and issue remediation.

Support RCSA; KCSA; KRIs, Issue, incident and action management.

Oversee incident, issue and action management.

Provide independent challenge on the adequacy and completeness of controls.

Prepare risk, control assurance and governance reports.

Operational Risk Management

Review and challenge RCSA, KCSA and risk assessments to ensure key operational risks and controls are appropriately identified and assessed

Monitor KRIs, operational risk exposures, incidents, loss events and emerging risks, and escalate material concerns through established channels

Review recurring incidents, control failures and operational risk themes to identify underlying weaknesses and areas requiring enhanced mitigation

Identify and assess emerging risks and ensure relevant risks are appropriately captured and scoped in the Risk Register and RCSA, with appropriate controls and mitigation actions

Provide timely operational risk information and reporting to support management oversight and decision-making

Internal Control Framework & assurance

Support the implementation, maintenance and monitoring of the Bank’s Internal Control Framework in line with approved policies and requirements

Review the design and operating effectiveness of key controls and provide independent challenge on their adequacy and completeness

Review control self-assessments, control attestations and other assurance outputs to identify control gaps and weaknesses

Identify process gaps, recurring control deficiencies and opportunities to strengthen the control environment

Provide practical recommendations to improve control design, execution and monitoring across business and support functions

Risk-based Control Testing

Coordinate risk-based control reviews and testing in line with approved operational risk and control assurance priorities

Review and challenge control testing results and assess whether identified exceptions are appropriately addressed

Assess control effectiveness against identified risks and control objectives and highlight areas requiring enhanced assurance

Monitor recurring, systemic or emerging control weaknesses and recommend appropriate corrective actions

Support targeted and thematic control reviews where operational risk trends or control concerns require further assessment

Issues, Incidents & Remediation

Provide second-line oversight of significant operational incidents, loss events, control breaches and related action plans

Support root-cause analysis of significant control failures and operational risk events and challenge proposed corrective actions

Monitor remediation of control gaps, operational risk issues, audit findings and regulatory actions within agreed timelines

Assess whether corrective actions adequately address the underlying risk and provide independent challenge where further action is required

Track overdue, recurring or material issues and escalate significant concerns to the Manager, Operational Risk

Risk & Control Advisory

Provide independent risk and control advice on new products, processes, projects and significant business changes

Engage process owners on identified risks, control weaknesses and opportunities for process and control improvement

Support risk assessments for significant changes and projects to ensure key operational risks and controls are considered

Promote awareness of sound operational risk and internal control practices through stakeholder engagement and targeted awareness training

Risk Reporting & Governance

Prepare risk and control reports covering RCSA, KCSA, KRIs, incidents, control testing, issues, remediation and emerging risks

Provide timely and accurate inputs to Management Risk Committees and other relevant governance forums

Analyse risk and control information to identify trends, concentrations, recurring weaknesses and areas requiring management attention

Maintain appropriate risk and control records and supporting documentation for assurance, reporting and governance purposes

Support regulatory reviews, governance assessments and other reviews relating to operational risk and internal controls

Qualification & Experience

Bachelor’s Degree in Risk Management, Finance, Accounting, Economics, Business Administration, Banking or a related field

Professional qualification such as CPA(K), ACCA, CIA, CRMA, CISA, IRM, FRR, FRM, PRM or equivalent will be an added advantage

Minimum five (5) years’ experience in Operational Risk, Internal Controls, Risk Assurance, Compliance, Internal Audit or related banking risk functions

Demonstrated experience in risk assessments, RCSA, KCSA, KRI monitoring, risk-based control testing, incident management and issue remediation

Sound knowledge of operational risk management, internal control principles, risk and control governance and assurance practices

Good understanding of CBK Prudential Guidelines, Basel Operational Risk Principles and the COSO Internal Control Framework

Experience in risk and control reporting, data analysis and stakeholder engagement

Key Competencies

Strong risk assessment, control evaluation and analytical skills

Practical experience in risk-based control testing and assurance

Strong operational risk monitoring, incident management and root-cause analysis

Ability to provide constructive independent challenge and exercise sound judgement

Strong stakeholder engagement, influencing and communication skills

Strong report writing, data analysis and presentation skills

Strong problem-solving skills with ability to manage multiple priorities and deadlines

go to method of application »

Minimum qualifications

BA/BSc/HND , Professional Certificate

How to apply

Use the link(s) below to apply on company website.

Data Protection Officer

Bancassurance Risk & Compliance Manager

Assistant Manager – Internal Controls & Compliance

Officer, Digital Financial Services & Project Risks

https://www.myjobmag.co.ke/apply-now/1358690

Similar open roles

• Bancassurance Risk & Compliance ManagerSidian Bank · Nairobi
• Internal Control and Compliance OfficerGIZ KE · Nairobi
• Officer, Digital Financial Services & Project RisksSidian Bank · Nairobi
• Data Protection OfficerSidian Bank · Nairobi
• Compliance Officer, IHD OfficeAga Khan University Hospital · Nairobi
• Group Data Protection Officer- Nairobi, Kenyaa leading organization in the hospitality industry with operations across East Africa