Information Risk & Business Resilience Manager

About the role

The Information Risk & Business Resilience Manager will lead the second‑line risk function for non‑financial risks, ensuring that business and technology units embed robust controls and resilience measures. You will translate group standards and regulatory expectations into practical actions for the Kenyan market.

Key responsibilities

• Interpret and implement Group risk standards and regulatory requirements at country level.
• Prepare committee‑ready risk commentary, escalation notes and executive summaries.
• Maintain and analyse risk registers, dashboards, incident data, audit findings and action trackers.
• Provide governance oversight for information risk, data privacy, cyber risk, technology risk and business continuity.
• Influence senior stakeholders, challenge decisions constructively and ensure independent risk acceptance.

Required profile

• First‑degree in IT, Computer Science, Risk Management, Law, Finance or related discipline.
• 7‑8 years of experience in information risk, data privacy, business resilience, cyber or technology risk.
• Strong analytical ability, attention to detail and high integrity when handling sensitive incidents.
• Proven ability to influence senior leaders and work collaboratively across functions.

Required skills

• Microsoft Excel
• Microsoft PowerPoint
• Microsoft Word
• Microsoft Teams
• Risk Market Place or equivalent GRC platform

What we offer

• Opportunity to shape risk and resilience strategy within a leading African bank.
• Exposure to senior leadership and cross‑functional teams.
• Professional development and support for relevant certifications.