Manager - Enterprise Risk & Governance

About the role

TestHiring is recruiting a Manager for Enterprise Risk & Governance in Nairobi, Kenya. The role covers enterprise risk management, operational risk, third-party risk, audit liaison, policy governance and compliance, and risk culture and awareness.

Key responsibilities

• Operationalise the enterprise risk management framework and Risk Appetite Statement (RAS); run quarterly risk register revalidations and risk heat maps with KRIs
• Manage the end-to-end third-party risk lifecycle, including vendor due diligence, SLA and security compliance monitoring, and risk scorecards
• Coordinate internal, external and Central Bank of Kenya audit engagements, track remediation and validate closures
• Run policy gap assessments, compliance maturity reviews, policy attestation and harmonisation, and support migration to an automated contract lifecycle management platform
• Deliver annual risk training (ERM, AML/CFT, data privacy), develop risk champions and accountability initiatives
• Build risk controls for remittance and cross-border payments, sanctions screening, FX, credit and settlement risk, and VASP due diligence
• Support MCT calibration, top-risk prioritisation, quantitative risk metrics, threshold back-testing and RAS Board Audit & Risk Committee approval
• Report project KPIs, model best practices and take part in professional development

Required profile

• Bachelor's degree in Risk Management, Finance, Accounting, Business Administration, Economics, Law, Information Systems or a related field
• Professional qualification in risk, audit, compliance or governance; certifications such as CRMA, CERM, FRM, CIA, CISA, CPA/ACCA desirable
• Experience in risk framework implementation, TPRM, audit coordination, policy governance, risk appetite and KRI/KPI development
• Ability to work across business functions, influence stakeholders without direct authority, and adapt to a fast-paced environment

Required skills

• Risk management, reporting, GRC and data-analysis tools
• Risk reporting and executive-level presentations, facilitation and training
• Project and change management, strong communication and analytical skills
• Ability to use AI tools and enterprise risk and governance systems