Assistant Manager – Internal Controls & Compliance

• Job Type Full Time
• Qualification BA/BSc/HND , Professional Certificate
• Experience 5 years
• Location Nairobi
• Job Field Banking
• Coordinate the implementation, maintenance and monitoring of the Bank’s Internal Control Framework.
• Conduct and coordinate risk-based control reviews and testing.
• Monitor control effectiveness, control weaknesses and issue remediation.
• Support RCSA; KCSA; KRIs, Issue, incident and action management.
• Oversee incident, issue and action management.
• Provide independent challenge on the adequacy and completeness of controls.
• Prepare risk, control assurance and governance reports.
• Review and challenge RCSA, KCSA and risk assessments to ensure key operational risks and controls are appropriately identified and assessed
• Monitor KRIs, operational risk exposures, incidents, loss events and emerging risks, and escalate material concerns through established channels
• Review recurring incidents, control failures and operational risk themes to identify underlying weaknesses and areas requiring enhanced mitigation
• Identify and assess emerging risks and ensure relevant risks are appropriately captured and scoped in the Risk Register and RCSA, with appropriate controls and mitigation actions
• Provide timely operational risk information and reporting to support management oversight and decision-making
• Support the implementation, maintenance and monitoring of the Bank’s Internal Control Framework in line with approved policies and requirements
• Review the design and operating effectiveness of key controls and provide independent challenge on their adequacy and completeness
• Review control self-assessments, control attestations and other assurance outputs to identify control gaps and weaknesses
• Identify process gaps, recurring control deficiencies and opportunities to strengthen the control environment
• Provide practical recommendations to improve control design, execution and monitoring across business and support functions
• Coordinate risk-based control reviews and testing in line with approved operational risk and control assurance priorities
• Review and challenge control testing results and assess whether identified exceptions are appropriately addressed
• Assess control effectiveness against identified risks and control objectives and highlight areas requiring enhanced assurance
• Monitor recurring, systemic or emerging control weaknesses and recommend appropriate corrective actions
• Support targeted and thematic control reviews where operational risk trends or control concerns require further assessment
• Provide second-line oversight of significant operational incidents, loss events, control breaches and related action plans
• Support root-cause analysis of significant control failures and operational risk events and challenge proposed corrective actions
• Monitor remediation of control gaps, operational risk issues, audit findings and regulatory actions within agreed timelines
• Assess whether corrective actions adequately address the underlying risk and provide independent challenge where further action is required
• Track overdue, recurring or material issues and escalate significant concerns to the Manager, Operational Risk
• Provide independent risk and control advice on new products, processes, projects and significant business changes
• Engage process owners on identified risks, control weaknesses and opportunities for process and control improvement
• Support risk assessments for significant changes and projects to ensure key operational risks and controls are considered
• Promote awareness of sound operational risk and internal control practices through stakeholder engagement and targeted awareness training
• Prepare risk and control reports covering RCSA, KCSA, KRIs, incidents, control testing, issues, remediation and emerging risks
• Provide timely and accurate inputs to Management Risk Committees and other relevant governance forums
• Analyse risk and control information to identify trends, concentrations, recurring weaknesses and areas requiring management attention
• Maintain appropriate risk and control records and supporting documentation for assurance, reporting and governance purposes
• Support regulatory reviews, governance assessments and other reviews relating to operational risk and internal controls
• Bachelor’s Degree in Risk Management, Finance, Accounting, Economics, Business Administration, Banking or a related field
• Professional qualification such as CPA(K), ACCA, CIA, CRMA, CISA, IRM, FRR, FRM, PRM or equivalent will be an added advantage
• Minimum five (5) years’ experience in Operational Risk, Internal Controls, Risk Assurance, Compliance, Internal Audit or related banking risk functions
• Demonstrated experience in risk assessments, RCSA, KCSA, KRI monitoring, risk-based control testing, incident management and issue remediation
• Sound knowledge of operational risk management, internal control principles, risk and control governance and assurance practices
• Good understanding of CBK Prudential Guidelines, Basel Operational Risk Principles and the COSO Internal Control Framework