Head, Group Security & Investigations

NCBA Group is a financial institution founded in 2019, operating in the banking and financial services sector in Kenya.

The incumbent will lead physical security, executive protection, investigations, intelligence gathering, fraud risk mitigation, crisis preparedness, security governance and resilience programs while proactively identifying and mitigating emerging threats including organized crime, insider threats, AI-enabled fraud, geopolitical instability, civil unrest, terrorism and third-party security risks. The role directly supports NCBA’s growth ambitions by ensuring a safe, resilient and secure operating environment that enables sustainable business performance, regulatory compliance and stakeholder confidence.

1. Develop and execute the Group Security and Investigations Strategy aligned to the Group Strategy.
2. Establish and maintain enterprise-wide physical security frameworks, standards and operating procedures.
3. Lead the development and execution of a multi-year security transformation roadmap.
4. Drive adoption of security technologies including AI-enabled surveillance, analytics and incident management platforms.
5. Ensure security governance, policies and standards remain fit for purpose across all jurisdictions.
6. Establish executive and Board-level security reporting frameworks and dashboards.
7. Drive continuous improvement in security maturity and operational effectiveness.
8. Ensure compliance with regulatory requirements and industry best practices.
9. Lead and oversee significant internal and external investigations involving fraud, misconduct, corruption, theft, forgery and policy violations.
10. Develop and maintain Group-wide investigations methodologies and case management frameworks.
11. Oversee whistleblowing investigations ensuring confidentiality, independence and objectivity.
12. Establish enterprise intelligence capabilities to identify emerging threats.
13. Coordinate intelligence gathering and information sharing across law enforcement and industry networks.
14. Lead recovery initiatives associated with fraud and criminal activity.
15. Monitor evolving crime trends including cyber-enabled financial crime, social engineering attacks and AI-generated fraud.
16. Ensure investigation findings translate into strengthened controls and risk mitigation measures.
17. Maintain centralized investigations reporting and governance frameworks.
18. Develop and maintain the Group Crisis Management Framework.
19. Lead security-related business continuity and resilience preparedness initiatives.
20. Coordinate enterprise response to significant security incidents.
21. Conduct threat, vulnerability and risk assessments.
22. Ensure preparedness for terrorism, civil unrest and major operational disruptions.
23. Lead crisis simulations and emergency response exercises.
24. Establish incident command and escalation protocols.
25. Support crisis communication during major events.
26. Monitor geopolitical and environmental developments that may impact business operations.
27. Build strategic partnerships with regulators, law enforcement agencies and industry bodies.
28. Represent the Group in banking security forums and industry working groups.
29. Manage outsourced security providers and strategic partners.
30. Oversee third-party security risk assessments and governance.
31. Support HR, Legal, Compliance, Risk and Internal Audit in investigations and regulatory engagements.
32. Provide executive security advisory services.
33. Develop executive protection programs for Board members and senior executives.
34. Build and lead a high-performing Group Security and Investigations function.
35. Develop succession plans and talent pipelines.
36. Foster a culture of accountability, professionalism and collaboration.
37. Strengthen specialist capability in investigations, intelligence analysis and crisis management.
38. Drive employee engagement and performance excellence.
39. Promote continuous learning and professional certification

1. Bachelor’s Degree in Security Management, Criminology, Law, Business Administration, Risk Management, Information Security or a related field.
2. Master’s Degree in Security Studies, Law, Business Administration, Risk Management or related discipline is preferred.
3. Certified Fraud Examiner (CFE)
4. Certified Protection Professional (CPP)
5. Certified Information Security Manager (CISM)
6. Certified Business Continuity Professional (CBCP)
7. Professional certifications in investigations, intelligence analysis, forensics or risk management.
8. Minimum 10-15 years’ relevant experience leading enterprise security, investigations, fraud risk management, crisis management or law enforcement functions.
9. At least 5 years in a senior leadership role.
10. Banking, financial services, telecommunications, intelligence, law enforcement or multinational corporate experience.
11. Proven track record managing large-scale investigations and complex security environments.
12. Demonstrated people leadership experience