Senior Manager, Compliance & Data Privacy

About the role

The Senior Manager, Compliance & Data Privacy at NCBA IG develops, implements and maintains a risk-based compliance framework covering regulatory compliance and data protection. The role gives independent oversight, challenge, monitoring and advisory support to the Board, management and business functions, coordinates regulatory engagement and reporting, and ensures compliance issues are escalated and remediated promptly. It is a full-time management position based in Nairobi.

Key responsibilities

• Compliance framework: maintain the Compliance Framework, Charter, Policy and annual plan, regulatory registers, reporting calendars and change trackers, and define indicators, thresholds and escalation protocols.
• Regulatory compliance: interpret the Insurance Act and IRA requirements, coordinate regulatory returns and responses, and prepare reports for management, board committees and the IRA.
• Risk monitoring: run compliance risk assessments, monitoring and testing programmes, document findings and corrective actions, and track regulatory changes.
• Business advisory: advise on products, claims, underwriting, distribution, marketing, technology and outsourcing, and monitor customer fairness, complaints and conduct risks.
• Regulatory engagement: act as primary liaison with the IRA, coordinate inspections and information requests, and liaise with other regulators.
• Breach management: maintain registers of breaches and findings, coordinate investigations and escalate significant issues.
• Training: coordinate annual compliance and awareness training, including conduct, conflicts, whistleblowing, financial crime, data protection and regulatory changes.
• Data protection: advise on data protection obligations, coordinate privacy impact assessments and data-subject requests, oversee breach management, and perform DPO duties where required.
• Financial crime: maintain controls for money laundering and sanctions, oversee POCAMLA and FRC obligations, and perform MLRO duties where required.

Required profile

• Bachelor's degree in Law, Finance, Accounting, Business Administration, Insurance, Risk Management, Economics or a related discipline; a postgraduate qualification is advantageous but not essential.
• 6-8 years' experience in compliance, legal, risk, audit, governance or regulatory affairs within a regulated financial-services environment, including at least 2-3 years at supervisory or management level.
• Demonstrable insurance experience, preferably general insurance, or strong knowledge of underwriting, claims, distribution and policyholder protection.
• Experience engaging regulators, preparing executive or Board reports, running compliance assessments and driving remediation to closure.
• A relevant professional qualification in compliance, risk, governance, insurance, audit, financial crime or data protection is preferred (e.g. AIIK/ACII, CPA(K), ACCA, CISA, CISM, CAMS).