Assistant Manager – Internal Controls & Compliance

Role Overview

This second-line operational risk role provides independent oversight of risk and controls across an assigned group of business and support functions. The role assesses whether key controls are properly designed and working as intended, helps teams address weaknesses, and gives management clear information to support sound decisions and effective governance.

Key Responsibilities

• Coordinate the implementation and ongoing monitoring of the Bank’s Internal Control Framework, applying approved policies and requirements.
• Review and challenge RCSAs, KCSAs, risk assessments and control attestations to check that material risks and controls are accurately identified and evaluated.
• Plan or coordinate risk-based control reviews and testing; assess results, follow up on exceptions and recommend further assurance where needed.
• Monitor KRIs, incidents, loss events and emerging risks, identify patterns or concentrations, and escalate significant concerns through established channels.
• Oversee significant incidents, control breaches and operational risk issues, including root-cause analysis and the quality and timeliness of corrective actions.
• Track remediation of control gaps, audit findings and regulatory actions; challenge proposed responses that do not adequately address the underlying risk.
• Advise stakeholders on operational risk and controls in new products, projects, processes and significant business changes, and promote sound control practices.
• Prepare accurate risk and assurance reports for management and governance forums, maintaining supporting records and documentation.

Requirements & Qualifications

• Bachelor’s degree in Risk Management, Finance, Accounting, Economics, Business Administration, Banking or a related discipline.
• At least five years of experience in operational risk, internal controls, risk assurance, compliance, internal audit or a related banking risk function.
• Demonstrated experience with risk assessments, RCSA and KCSA processes, KRI monitoring, control testing, incident management and issue remediation.
• Working knowledge of operational risk management, internal control principles, governance and assurance practices.
• Understanding of CBK Prudential Guidelines, Basel operational risk principles and the COSO Internal Control Framework.
• Experience analysing risk and control information, preparing reports and engaging with stakeholders across business and support functions.
• A professional qualification such as CPA(K), ACCA, CIA, CRMA, CISA, IRM, FRR, FRM, PRM or an equivalent credential is an advantage.
• Strong analytical and control evaluation skills, sound judgement, and the confidence to offer constructive independent challenge.
• Effective communication, influencing, report-writing and presentation skills, with the ability to manage competing priorities and deadlines.