All open roles
Open role

Senior Manager, Risk

Aceli Africa · Nairobi

Aceli AfricaNairobiPosted 13 November 2026

At a glance

Closing date
The listing does not give one. Employers often close early when they have enough applicants, so apply soon.
Where
Nairobi, Kenya
How to apply
On myjobmag.co.ke, where the employer takes applications.
Similar roles
104 other open Legal & Compliance roles on the Kenya board right now.

Job Description

Aceli’s next phase of growth requires effective enterprise risk management, business continuity and organisational controls that work reliably across five countries and several legal entities. Reporting to the Managing Director, Technology & Operations, the Senior Manager, Risk will lead Aceli’s enterprise risk framework and crisis preparedness, and oversee the legal, compliance and policy control environment, including information security governance. The role will line-manage the Legal & Compliance lead. We are looking for a hands-on senior manager who uses sound judgement, translates frameworks into practical action, and ensures that material risks and agreed mitigations are managed through to completion.

Key Responsibilities

Enterprise Risk

Own Aceli’s enterprise risk management framework and actively maintain the organisation-wide risk register as a management tool.

Run the Risk Management Group: proactive agendas, risk reporting, action tracking and follow-up. Escalate overdue actions and material new risks.

Prepare consolidated risk reporting for Aceli’s Leadership Team and Global Board, focused on material enterprise exposures, emerging risks, and the decisions and actions required.

Integrate risk identification and analysis into management decisions, including entry into new countries, development of products, and engagement with new partners and vendors.

Business Continuity and Crisis Management

Lead Aceli’s business continuity planning across the organisation and country operations, keeping plans practical, current and suited to each operating context. Test preparedness through simulations and post-incident reviews.

Maintain clear arrangements for incident reporting, escalation and crisis response, including information security incidents. Coordinate the management response to material disruptions and ensure lessons learned are implemented.

Legal & Compliance, Policies and Controls

Oversee Aceli’s Legal & Compliance function through its lead, covering data protection, legal and regulatory compliance, country legal-entity governance and company secretarial work.

Own the organisation-wide policy framework, including ethics and integrity (Code of Conduct, Anti-Fraud, AML, Whistleblowing), safeguarding and duty of care, and data, IT and AI. Ensure clear policy ownership, approvals, review cycles, staff training and attestations, in coordination with HR.

With the Legal & Compliance lead, oversee a single calendar of statutory, regulatory, donor, legal-entity and policy obligations across Aceli’s entities, working with Finance, HR, and the Grants, Contracts and Procurement team.

Ensure actions arising from risk reviews, audits and internal control assessments are tracked to completion. Identify material control gaps and agree proportionate remedial action.

Oversee Aceli’s insurance programme, including appropriate coverage for country legal entities (such as professional indemnity), periodic coverage reviews, renewals and claims follow-up.

Provide oversight of information security governance, working with the IT service provider and the Legal & Compliance lead (who owns data protection compliance). Ensure policies, roles and procedures remain current, including third-party and vendor risk management.

Ensure information security awareness, staff training and attestations are completed, and identified vulnerabilities are tracked through to remediation.

Qualifications

Required

Bachelor's degree in Risk Management, Business Administration, Finance, Law or related field, or equivalent experience.

At least 12 years’ progressive experience in risk management, governance or operational control functions, with demonstrated accountability for enterprise risks and control frameworks.

Proven experience in a growing, mission-driven organisation implementing enterprise risk frameworks, managing risk registers and mitigation plans, and reporting to senior leadership and Boards.

Hands-on experience developing, implementing and testing business continuity plans and managing operational disruptions.

Experience managing organisational policies, compliance processes and operational controls.

Strong track record of cross-functional delivery, stakeholder management, and staff supervision.

Preferred

Multi-country experience in East & Southern Africa, ideally in international development, financial services or donor-funded organisations.

Professional training or certification in risk management or business continuity.

Familiarity with insurance, legal and regulatory compliance, procurement and information security governance.

Experience strengthening risk management and control systems in growing organisations.

Who This Role Suits

A strong executor. Turns agreed priorities into completed actions, not just frameworks and plans.

Structured and disciplined. Keeps reliable systems for planning, documentation and follow-through.

Pragmatic. Builds controls proportionate to the risk and avoids unnecessary bureaucracy.

Proactive and accountable. Anticipates issues, takes ownership and escalates early.

A collaborator. Influences colleagues across functions and countries without relying on formal authority.

A developer of people. Sets clear expectations, gives direct feedback and hands over real ownership.

Clear and concise. Communicates risks and recommendations in a way that supports timely decisions.

Minimum qualifications

BA/BSc/HND

How to apply

Interested and qualified? Go to Aceli Africa on jobs.smartrecruiters.com to apply

Similar open roles

Get applications like this ready in minutes.

Set up your search once. RezSync matches you to open roles like this one and writes a cover letter for each from your CV. Roles that take applications on myjobmag.co.ke need one link from you; where employers take email applications, RezSync sends them for you.

More applications for less effort. Employers decide who they interview; RezSync does not guarantee a job.

Prefer to apply yourself? Apply on myjobmag.co.ke