Senior Manager, Compliance & Data Privacy at NCBA Group

• Job Type Full Time
• Qualification BA/BSc/HND , MBA/MSc/MA , Professional Certificate
• Experience 6 - 8 years
• Location Nairobi
• Job Field Finance / Accounting / Audit
• Develop and maintain the Compliance Framework, Charter, Policy and annual Compliance Plan.
• Maintain regulatory registers, reporting calendars and change trackers.
• Define compliance indicators, reporting thresholds and escalation protocols.
• Preserve Compliance independence and align with governance frameworks.
• Interpret Insurance Act, IRA requirements and applicable regulations and translate them into business obligations.
• Coordinate regulatory returns, applications, attestations and responses.
• Prepare compliance reports for Management, Board Committees and the IRA.
• Maintain records of submissions, approvals, correspondence and commitments.
• Conduct compliance risk assessments across business operations.
• Implement monitoring and testing programmes to assess control effectiveness.
• Document findings, corrective actions and closure evidence.
• Monitor regulatory changes and coordinate implementation.
• Provide compliance advice on products, claims, underwriting, distribution, marketing, technology and outsourcing.
• Review initiatives for regulatory, conduct and reporting implications.
• Monitor customer fairness indicators, complaints and conduct risks.
• Challenge decisions creating material regulatory or reputational exposure.
• Act as the primary liaison with the IRA on compliance matters.
• Coordinate inspections, meetings, information requests and responses.
• Monitor regulatory commitments and report outcomes to Management and the Board.
• Liaise with other regulators where applicable.
• Maintain registers for breaches, findings, policy exceptions and remediation actions.
• Coordinate investigations, escalation and corrective actions for compliance incidents.
• Escalate significant issues through approved governance channels.
• Coordinate annual compliance training and awareness programmes.
• Monitor completion, effectiveness and remediation of gaps.
• Support role-based training on conduct, conflicts, whistleblowing, financial crime, data protection and regulatory changes.
• Advise on data protection obligations and privacy requirements.
• Ensure compliance with the Data Protection Act and related regulations.
• Coordinate privacy impact assessments, data-sharing arrangements and data-subject requests.
• Oversee personal data breach management and privacy records.
• Perform DPO duties where formally designated and requirements are met.
• Maintain controls for money laundering, sanctions and related financial crime risks.
• Oversee applicable POCAMLA and FRC obligations, controls and reporting.
• Coordinate risk assessments, monitoring, recordkeeping and remediation.
• Perform MLRO duties where formally designated and requirements are met.
• Maintain an individual development plan aligned to role requirements.
• Complete professional development, regulatory updates and continuing education.
• Apply learning to strengthen technical expertise, leadership and compliance oversight.
• Bachelor’s degree in Law, Finance, Accounting, Business Administration, Insurance, Risk Management, Economics or a related discipline.
• A relevant postgraduate qualification is advantageous but not essential.
• A relevant professional qualification in compliance, risk, governance, internal control, insurance, audit, financial crime or data protection is preferred.
• Relevant credentials may include AIIK/ACII, CPA(K), ACCA, CISA, CISM, CAMS or another recognized compliance, risk or privacy certification, depending on the candidate’s professional route and the role remit.
• 6–8 years’ relevant experience in compliance, legal, risk, audit, governance or regulatory affairs within a regulated financial-services environment.
• At least 2–3 years’ experience at supervisory or management level.
• Demonstrable insurance experience, preferably general insurance, or strong working knowledge of underwriting, claims, distribution and policyholder-protection processes.
• Practical experience engaging regulators, preparing executive or Board reports, conducting compliance assessments and driving remediation to closure.