Manager – Enterprise Risk & Governance

This company is a real-time payment services provider, established under the National Payment System (NPS) Act, focused on facilitating inter-bank money transfers within Kenya and internationally.

A real-time payment services company, established under the National Payment System (NPS) Act to facilitate inter-bank money transfers, is seeking a Manager for Enterprise Risk & Governance. This pivotal role involves leading the company's enterprise risk management framework, third-party risk management, audit coordination, operational quality assurance, and policy governance. The manager will provide essential second-line oversight, ensuring that all enterprise risks are effectively identified, assessed, monitored, mitigated, and reported, thereby supporting regulatory compliance and robust governance practices. Strong stakeholder engagement skills are crucial for success in this position.

1. Implement and manage the enterprise risk management framework and Risk Appetite Statement.
2. Conduct quarterly revalidations of departmental risk registers and maintain the enterprise risk heat map.
3. Monitor Key Risk Indicators (KRIs) and establish real-time risk tracking and reporting.
4. Perform operational procedure quality assurance reviews and facilitate risk deep-dive sessions.
5. Support the identification, assessment, treatment, monitoring, and escalation of enterprise and operational risks.
6. Oversee the entire Third-Party Risk Management (TPRM) lifecycle, including due diligence and vendor compliance monitoring.
7. Maintain a current TPRM inventory and continuous vendor risk scorecards, escalating and mitigating material third-party risks.
8. Coordinate all internal, external, and Central Bank of Kenya (CBK) supervisory audit engagements.
9. Manage audit planning, onsite activities, document requests, interviews, and management responses.
10. Maintain a centralized audit issue and remediation tracking register, monitoring timelines and validating closures.
11. Conduct enterprise-wide policy gap assessments and establish baseline compliance maturity.
12. Review, remediate, and coordinate attestation for enterprise policies, supporting harmonization and legal governance.
13. Support the migration of contract administration to an automated Contract Lifecycle Management (CLM) platform.
14. Design and deliver annual risk management training covering ERM, AML/CFT, and data privacy.
15. Establish and coordinate departmental risk champions, developing accountability and awareness initiatives.
16. Develop and implement risk controls for regional remittance and cross-border payment channels.
17. Establish sanctions screening, FX liquidity, credit, and settlement risk controls.
18. Develop due diligence and vetting frameworks for Virtual Asset Service Providers (VASPs) and monitor related regulatory developments.
19. Facilitate Management Committee (MCT) workshops on enterprise risks and support the identification of top risks.
20. Develop quantitative risk metrics, Green/Amber/Red thresholds, and back-test them against historical data.
21. Establish automated escalation triggers for emerging risk exposures and coordinate RAS endorsement.
22. Stay updated on industry practices, trends, and technologies in enterprise risk and governance.
23. Model best practices, ensure quality performance, and maintain quality service through company policies and standards.
24. Implement quality control checks, report on KPIs for risk and governance projects, and identify areas for improvement.
25. Perform any other assigned duties.

1. Bachelor’s Degree in Risk Management, Finance, Accounting, Business Administration, Economics, Law, Information Systems, or a related field.
2. Professional qualification in risk, audit, compliance, or governance.
3. Desirable certifications include CRMA, CERM, FRM, CIA, CISA, CPA/ACCA, or equivalent.
4. Minimum of 7 years of experience, preferably in the FinTech or financial services sector in a similar role.
5. Proven experience in enterprise risk management, framework implementation, and operational risk assessment.
6. Expertise in Third-Party Risk Management (TPRM) and vendor due diligence.
7. Strong background in audit coordination, engagement management, and remediation tracking.
8. Knowledge of policy governance, gap assessment, and compliance maturity frameworks.
9. Experience with risk appetite, KRI/KPI development, and backtesting.
10. Awareness of regulatory and compliance risks related to virtual assets, cross-border channels, and payment systems.
11. Familiarity with contract and SLA governance, including CLM platform integration.
12. Proficiency in risk management, reporting, GRC, and data analysis tools.
13. Excellent risk reporting, executive-level presentation, facilitation, workshop delivery, and training skills.
14. Strong project and change management capabilities.
15. Exceptional attention to detail, sound professional judgment, and high integrity.
16. Ability to collaborate across functions and influence stakeholders without direct authority.
17. In-depth knowledge of applicable laws and regulations in enterprise risk and governance.
18. Results-oriented, self-motivated, adaptable, and able to thrive in a fast-paced, high-demand environment.
19. Experience in translating KPIs to teams to achieve buy-in and results.
20. Strong interpersonal, communication, and presentation skills with excellent organizational and multitasking abilities.
21. Aptitude for leveraging AI systems and tools in enterprise risk and governance management.
22. Highly analytical with strong quantitative risk assessment and problem-solving skills.