The job holder will be responsible for providing independent second-line oversight, challenge and assurance over the Bank's operational risk and internal control environment across an assigned portfolio of business and support units. The role supports risk assessment, control assurance, operational risk monitoring, issue remediation and risk reporting in line with the Bank's approved frameworks and requirements.
KEY RESPONSIBILITIES AND ACTIVITIES
- Coordinate the implementation, maintenance and monitoring of the Bank's Internal Control Framework.
- Conduct and coordinate risk-based control reviews and testing.
- Monitor control effectiveness, control weaknesses and issue remediation.
- Support RCSA; KCSA; KRIs, Issue, incident and action management.
- Oversee incident, issue and action management.
- Provide independent challenge on the adequacy and completeness of controls.
- Prepare risk, control assurance and governance reports.
Operational Risk Management
- Review and challenge RCSA, KCSA and risk assessments to ensure key operational risks and controls are appropriately identified and assessed
- Monitor KRIs, operational risk exposures, incidents, loss events and emerging risks, and escalate material concerns through established channels
- Review recurring incidents, control failures and operational risk themes to identify underlying weaknesses and areas requiring enhanced mitigation
- Identify and assess emerging risks and ensure relevant risks are appropriately captured and scoped in the Risk Register and RCSA, with appropriate controls and mitigation actions
- Provide timely operational risk information and reporting to support management oversight and decision-making
Internal Control Framework & assurance
- Support the implementation, maintenance and monitoring of the Bank's Internal Control Framework in line with approved policies and requirements
- Review the design and operating effectiveness of key controls and provide independent challenge on their adequacy and completeness
- Review control self-assessments, control attestations and other assurance outputs to identify control gaps and weaknesses
- Identify process gaps, recurring control deficiencies and opportunities to strengthen the control environment
- Provide practical recommendations to improve control design, execution and monitoring across business and support functions
Risk-based Control Testing
- Coordinate risk-based control reviews and testing in line with approved operational risk and control assurance priorities
- Review and challenge control testing results and assess whether identified exceptions are appropriately addressed
- Assess control effectiveness against identified risks and control objectives and highlight areas requiring enhanced assurance
- Monitor recurring, systemic or emerging control weaknesses and recommend appropriate corrective actions
- Support targeted and thematic control reviews where operational risk trends or control concerns require further assessment
Issues, Incidents & Remediation
- Provide second-line oversight of significant operational incidents, loss events, control breaches and related action plans
- Support root-cause analysis of significant control failures and operational risk events and challenge proposed corrective actions
- Monitor remediation of control gaps, operational risk issues, audit findings and regulatory actions within agreed timelines
- Assess whether corrective actions adequately address the underlying risk and provide independent challenge where further action is required
- Track overdue, recurring or material issues and escalate significant concerns to the Manager, Operational Risk
- Provide independent risk and control advice on new products, processes, projects and significant business changes
- Engage process owners on identified risks, control weaknesses and opportunities for process and control improvement
- Support risk assessments for significant changes and projects to ensure key operational risks and controls are considered
- Promote awareness of sound operational risk and internal control practices through stakeholder engagement and targeted awareness training
Risk Reporting & Governance
- Prepare risk and control reports covering RCSA, KCSA, KRIs, incidents, control testing, issues, remediation and emerging risks
- Provide timely and accurate inputs to Management Risk Committees and other relevant governance forums
- Analyse risk and control information to identify trends, concentrations, recurring weaknesses and areas requiring management attention
- Maintain appropriate risk and control records and supporting documentation for assurance, reporting and governance purposes
- Support regulatory reviews, governance assessments and other reviews relating to operational risk and internal controls
Qualification & Experience
- Bachelor's Degree in Risk Management, Finance, Accounting, Economics, Business Administration, Banking or a related field
- Professional qualification such as CPA(K), ACCA, CIA, CRMA, CISA, IRM, FRR, FRM, PRM or equivalent will be an added advantage
- Minimum five (5) years' experience in Operational Risk, Internal Controls, Risk Assurance, Compliance, Internal Audit or related banking risk functions
- Demonstrated experience in risk assessments, RCSA, KCSA, KRI monitoring, risk-based control testing, incident management and issue remediation
- Sound knowledge of operational risk management, internal control principles, risk and control governance and assurance practices
- Good understanding of CBK Prudential Guidelines, Basel Operational Risk Principles and the COSO Internal Control Framework
- Experience in risk and control reporting, data analysis and stakeholder engagement
- Strong risk assessment, control evaluation and analytical skills
- Practical experience in risk-based control testing and assurance
- Strong operational risk monitoring, incident management and root-cause analysis
- Ability to provide constructive independent challenge and exercise sound judgement
- Strong stakeholder engagement, influencing and communication skills
- Strong report writing, data analysis and presentation skills
- Strong problem-solving skills with ability to manage multiple priorities and deadlines