1. JOB INFORMATION

Division: Corporate
Department: Corporate
Section: Risk
Reports to: General Manager-Corporate
Work station: Nairobi

2. JOB PURPOSE

Responsible for overseeing and enhancing the CFAO Kenya Limited internal controls environment.

Ensures that financial and operational processes follow CFAO policies, regulatory requirements, and industry standards.

Risk management, audits, and maintaining the effectiveness of internal controls to prevent fraud, errors, and inefficiencies.

This role is responsible for ensuring an effective implementation of group compliance policy, CFAOK`s compliance program and PACI-Internal control tool.

The role is also responsible for ensuring compliance with Data Protection Laws and is also responsible for having an updated Business continuity plan in place for the business.

3. MAIN RESPONSIBILITIES OF THE JOB

Develop and Implement Compliance Programs

• Create and enforce policies and procedures to ensure the organization adheres to legal standards and internal policies.
• Implement and ensure alignment with Group compliance tools, including the Anti-Bribery & Corruption Policy and Whistleblowing & Speak Up Framework.

Risk Assessment and Management

• Identify, assess, and monitor risks within the organization, providing recommendations for mitigation.
• Work closely with department representatives to identify and assess risks specific to each department and come up with Risk & compliance registers for each department.
• Conduct due diligence including on member check for highlighted transactions and deals.

Training and Education:

• Educate and train staff in compliance and risk management protocols.
• Take charge of the development and implementation of the Compliance awareness program.
• Create awareness on anti-bribery, fraud prevention, and corporate governance through   compliance training.
• Train and support other departments, branches and divisions in understanding and implementing internal control policies, risk registers and procedures.
• Conduct training sessions and exercises to ensure employees are aware of their roles in the business continuity plan
• Develop and deliver training programs to educate employees on data protection principles and practices.

Auditing and Monitoring

• Conduct regular audits and inspections to ensure compliance with regulations and internal policies (SOPs/DOA).
• Routine internal control reviews and reporting of management and branches based on the PACI controls questionnaire.
• Track the progress of remediation of control weaknesses identified by PACI Audit.
• Collaborate with internal and external auditors to ensure proper auditing procedures are followed. Provide necessary documentation and assist in audit-related activities.
• Review the existence of documents and processes at CFAOK branches and divisions to ensure non-compliant departments and divisions are identified and supported in the development and implementation of appropriate documents, procedures and processes.
• Review and monitor the progress of projects identifying risks coming through the project.

Reporting:

• Prepare detailed reports for management and regulatory bodies on compliance and risk issues.
• Reports should detail the results of audits, control testing, and risk assessments/impacts and provide recommendations for process improvements.
• Share monthly reports on investigations and due diligence checks.

  Regulatory Updates:

• Monitor changes in laws, regulations, and industry trends to ensure internal controls are up to date including improvements to enhance the effectiveness of internal control systems.

Develop and Implement Business Continuity Plans:

• Create and maintain comprehensive business continuity plans to ensure the organization can quickly recover from disruptions.
• Coordinate with various departments to develop and update continuity plans using a risk-based approach.
• Identify critical business functions and the impact of potential disruptions.
• Periodically review and update business continuity plans to reflect changes in the organization and emerging risks.
• Ensure documentation of processes is accurate and up to date.
• Ensure that business continuity plans comply with relevant regulations and industry standards.

Develop and Implement Data Protection Policies

• Create and enforce policies to ensure compliance with data protection laws and other relevant regulations.
• Regularly review and update data protection policies to reflect changes in legislation and best practices.
• Oversee the organization’s compliance with data protection regulations.
• Ensure all staff are aware of their responsibilities regarding data protection

4. KNOWLEDGE, SKILLS AND EXPERIENCE

(Minimum level of academic and professional qualification required to perform effectively in the role)

CPAK

Accreditations in Risk Management/Compliance

Business Degree from a recognized university.

Minimum level of experience required to perform effectively in the role

• At least 5 Years’ working experience with 3 Years experience in risk and compliance

5. WORKING RELATIONSHIPS
Internal customers

1. All sections (functions, branches, and division)
2. Head of sections (risk owners and champions)
3. Senior Management

External Customers

1. CFAO HQ Compliance Team,
2. External bodies- Regulators.

6. COMPETENCIES

Technical

1. Knowledge of relevant legislation i.e. tax laws
2. Knowledge of professional standards i.e. IFRS
3. Computer literacy i.e. MS office, ERP
4. Basic knowledge of various ERPs.
5. Good understanding of risk management and controls.
6. Understanding of government regulations, regulatory bodies, and relevant standards related to compliance and risk management.

Competency

1. Internal Auditing knowledge
2. Knowledge of data analytics and data-driven decision-making
3. Ability to manage and lead cross-functional teams
4. High level of integrity and ability to maintain confidentiality
5. Good attention to detail and problem-solving abilities
6. Risk management

Functional

1. Report writing skills
2. Presentation skills
3. Communication skills

Behavioral

1. Innovation – Ability to come up with new and better ways of working to improve efficiency and effectiveness
2. Time management – Ability to use time effectively and efficiently
3. Interpersonal skills – Ability to build rapport and constructive and effective relationships with colleagues and customers
4. Customer focus – Establishes and maintains effective relationships with both internal and external customers, to gain trust and respect
5. Ethics and values – Adheres to an appropriate and effective set of core values and beliefs, and in alignment with the CFAO Kenya values
6. Integrity and trust – Trusted individuals who can present the unvarnished truth in an appropriate and helpful manner, keep confidence, admit mistakes, don’t misrepresent themselves for personal gain

Applications close on 10th November 2025. Only shortlisted candidates will be contacted.