Background information about the job or company (e.g., role context, company overview)

Equity Bank Limited (The "Bank”) is incorporated, registered under the Kenyan Companies Act Cap 486 and domiciled in Kenya. The address of the Bank’s registered office is 9th Floor, Equity Centre, P.O. Box 75104 - 00200 Nairobi. The Bank is licensed under the Kenya Banking Act (Chapter 488), and continues to offer retail banking, microfinance and relat...

Purpose of the Role:

To lead the identification, assessment, and mitigation of end-to-end supply chain risks to ensure resilience and continuity.

To align risk management strategies with the 10 Process Centric Teams (PCT’s) in Supply Chain and the 17 principle risk types, while owning risk registers, readiness checklists, and CSTs (Control Self-Assessments) for the department.

Responsibilities or duties:

Supply Chain Risk Governance & Frameworks

• Lead the group-wide supply chain risk framework, ensuring consistent application across 6 subsidiaries (EBCDC, EBKL, EBTZ, EBSS, EBRW, EBUG) and alignment with enterprise risk appetite.
• Establish subsidiary-specific governance committees to escalate risks (e.g., regional disruptions, local regulatory non-compliance).
• Collaborate with Process-Centric Teams (PCTs); Administration, Procurement, Warehouse & Logistics, etc. to embed risk policies into their workflows.

Risk Identification, Assessment, and Reporting

Enterprise-Wide Risk Assessments

• Conduct group-level risk assessments across all 10 Process-Centric Teams (PCTs), aligning risks to the 17 principle risk types.
• Oversee Control Self-Assessments (CSTs) and Key Risk Indicators (KRIs) tailored to each PCT’s operations.

Risk Register Development & Maintenance

• Develop and maintain Subsidiary-specific risk registers (EBKL, EBRW, etc.) tracking exposures per PCT.
• Consolidated group-wide registers mapping risks across all 6 subsidiaries.
• Ensure registers are updated as per set cadence with mitigation progress.

Monitoring & Challenge

• Actively monitor and challenge PCT leaders (Procurement, Logistics, HSE, etc.) on:
  • Emerging risks.
  • Cross-subsidiary dependencies.
• Validate mitigation plans are actionable, resourced, and time-bound.

Reporting & Escalation

• Deliver monthly risk reports to the Head of Supply Chain Governance & Processes, including:
  • Heat maps ranking risks by likelihood/impact.
  • Subsidiary-specific control gaps.
  • Regulatory exposure dashboards.

Incident Management & Scenario Analysis

• Oversee incident response for supply chain disruptions, ensuring root cause analysis.
• Lead scenario planning for subsidiary-specific risks.
• Develop PCT-specific readiness checklists and Control Self-Assessments (CSTs).

Risk in Projects & Change Management

• Provide risk oversight for supply chain initiatives (e.g., outsourcing, nearshoring, digital transformation).
• Embed risk considerations into workflows and strategic decisions (e.g., supplier onboarding, cost vs. risk trade-offs).
• Evaluate risk exposures of prospective procurements
• Partner with Governance & Processes PCT to develop group-wide risk thresholds for project approvals.
• Track post-implementation risk metrics

Stakeholder Engagement & Culture

• Act as the primary liaison for supply chain risk with internal teams and external partners (suppliers, regulators) on behalf of the Head of Supply Chain Governance And Processes.
• Promote a risk-aware culture through training, workshops, and advisory support for business units.

Qualifications or requirements (e.g., education, skills)

Experience Needed:

• 8+ years in supply chain risk management, with at least 5 years in a group/regional -level role overseeing multiple countries/subsidiaries/business units.
• Proven experience in:
  • Developing risk registers, CSTs, and readiness checklists for diverse Process-Centric Teams (PCTs).
  • Managing multi-jurisdictional supply chains (e.g., navigating tariffs, sanctions, local compliance).
  • Leading risk assessments for procurements (>$[X] threshold) and change initiatives (e.g., warehouse automation).
  • Track record of influencing C-suite stakeholders and subsidiary leadership (e.g. CEO, Procurement Head).

Nice-to-Haves:

• Experience with specific subsidiaries’ markets; DRC, Kenya, Uganda, Rwanda, Tanzania, South Sudan
• Background in non-supply-chain risk domains (e.g., operational risk, cybersecurity) to address cross-functional exposures.

Academic qualifications and certifications

• 8+ years in supply chain risk management.
• Experience developing risk registers/checklists.

Nice-to-Haves:

• Certifications (CSCMP, CPSM, CRISC).
• Geopolitical risk analysis experience.

• Lead the group-wide supply chain risk framework, ensuring consistent application across 6 subsidiaries (EBCDC, EBKL, EBTZ, EBSS, EBRW, EBUG) and alignment with enterprise risk appetite.
• Establish subsidiary-specific governance committees to escalate risks (e.g., regional disruptions, local regulatory non-compliance).
• Collaborate with Process-Centric Teams (PCTs); Administration, Procurement, Warehouse & Logistics, etc. to embed risk policies into their workflows.
• Conduct group-level risk assessments across all 10 Process-Centric Teams (PCTs), aligning risks to the 17 principle risk types.
• Oversee Control Self-Assessments (CSTs) and Key Risk Indicators (KRIs) tailored to each PCT’s operations.
• Develop and maintain Subsidiary-specific risk registers (EBKL, EBRW, etc.) tracking exposures per PCT.
• Consolidated group-wide registers mapping risks across all 6 subsidiaries.
• Ensure registers are updated as per set cadence with mitigation progress.
• Actively monitor and challenge PCT leaders (Procurement, Logistics, HSE, etc.) on: Emerging risks. Cross-subsidiary dependencies.
• Validate mitigation plans are actionable, resourced, and time-bound.
• Deliver monthly risk reports to the Head of Supply Chain Governance & Processes, including: Heat maps ranking risks by likelihood/impact. Subsidiary-specific control gaps. Regulatory exposure dashboards.
• Oversee incident response for supply chain disruptions, ensuring root cause analysis.
• Lead scenario planning for subsidiary-specific risks.
• Develop PCT-specific readiness checklists and Control Self-Assessments (CSTs).
• Provide risk oversight for supply chain initiatives (e.g., outsourcing, nearshoring, digital transformation).
• Embed risk considerations into workflows and strategic decisions (e.g., supplier onboarding, cost vs. risk trade-offs).
• Evaluate risk exposures of prospective procurements
• Partner with Governance & Processes PCT to develop group-wide risk thresholds for project approvals.
• Track post-implementation risk metrics
• Act as the primary liaison for supply chain risk with internal teams and external partners (suppliers, regulators) on behalf of the Head of Supply Chain Governance And Processes.
• Promote a risk-aware culture through training, workshops, and advisory support for business units.

• Risk management
• Supply chain risk management
• Risk assessment
• Risk mitigation
• Risk registers
• Control Self-Assessments (CSTs)
• Readiness checklists
• Process-Centric Teams (PCTs) management
• Multi-jurisdictional supply chain management
• Stakeholder engagement
• Influencing C-suite stakeholders
• Geopolitical risk analysis

• 8+ years in supply chain risk management
• At least 5 years in a group/regional -level role overseeing multiple countries/subsidiaries/business units
• Proven experience in developing risk registers, CSTs, and readiness checklists for diverse Process-Centric Teams (PCTs)
• Proven experience in managing multi-jurisdictional supply chains (e.g., navigating tariffs, sanctions, local compliance)
• Proven experience in leading risk assessments for procurements (>$[X] threshold) and change initiatives (e.g., warehouse automation)
• Track record of influencing C-suite stakeholders and subsidiary leadership (e.g. CEO, Procurement Head)
• Experience with specific subsidiaries’ markets; DRC, Kenya, Uganda, Rwanda, Tanzania, South Sudan (Nice-to-Have)
• Background in non-supply-chain risk domains (e.g., operational risk, cybersecurity) to address cross-functional exposures (Nice-to-Have)
• Certifications (CSCMP, CPSM, CRISC) (Nice-to-Have)
• Geopolitical risk analysis experience (Nice-to-Have)