Key Responsibilities:

The Purpose of this role is to:
1.  Lead the implementation, enhancement, and operationalization of World Vision Kenya’s Enterprise Risk Management (ERM) Framework. This strategic role is responsible for systematically identifying, assessing, mitigating, monitoring, and reporting risks across all functions, projects, and departments. Additionally, ensure that risk management practices are embedded into core business processes, support compliance with internal policies and external regulations, and foster a culture of accountability, resilience, and continuous improvement. 
By working closely with Senior Leadership, Management, and cross-functional teams, the role holder will drive organizational compliance processes and translate risk insights into actionable recommendations for decision-making. The role holder requires strategic thinking, strong collaboration, and the ability to align risk mitigation strategies with organizational objectives and values.

2.    Manage and conduct investigations into allegations of misconduct, fraud, safeguarding violations, and other forms of non-compliance within the national office and its field operations. The role holder ensures that all investigations are conducted professionally, ethically, and in alignment with the Kenya Data Protection Act, internal policies, and donor requirements. The Risk & Investigations Specialist will also support the development of preventive measures, build staff capacity in fraud risk management, and contribute to strengthening the organization’s internal control environment.

Please Note: World Vision is a Christian humanitarian organization with a mission centered on following Jesus Christ in service to the world´s most vulnerable children. Therefore, in all locations to the fullest extent legally permissible, the successful applicant will affirm our core documents, observe conduct compatible with Christian principles, serve at a high level of professional ethics, and strive to act in accordance with cultural sensitivities. Furthermore, regular attendance with team and office devotions, chapel, and prayer gatherings are expected in line with policies in the World Vision host location and its departments.

Lead the continuous enhancement and strategic strengthening of World Vision Kenya’s risk management framework:

Job Responsibilities:

A.     Strategic Risk Leadership

• Lead the enhancement of WVK’s ERM framework to align with WVK’s strategy, World Vision Partnership, and regulatory expectations.
• Oversee the development of risk appetite, scoring models, and reporting structures.
• Manage the implementation of the Risk Management Policy Framework, ensuring periodic updates and alignment with Board directives or partnership requirements.
• Manage the Riskonnect system and other risk automation tools to support data-driven decision-making.
• Oversee the design and rollout of systems, standards, and procedures for risk data collection and analysis in line with the Data Protection Act.
• Ensure departments maintain Risk registers and manage compliance risks in line with the ERM framework.
• Maintain a central repository of policies, regulations, and compliance requirements.
• Engage multi-sectoral teams to integrate risk management into project implementation and operational planning.

B.      Risk Identification, Assessment, Monitoring & Reporting

• Conduct and oversee risk assessments across departments and projects to identify threats to organizational objectives.
• Maintain and update the enterprise risk register in collaboration with risk owners.
• Monitor WVK’s risk exposure and proactively flag emerging risks to senior leadership.
• Prepare and present risk reports and dashboards to the Board Audit & Risk Committee on a quarterly basis.

• Drive the embedding of compliance using the Integrated Compliance Monitoring Tool.
• undefined

Capacity Building, Stakeholder Engagement, & Collaboration

• Facilitate training sessions for staff and partners on risk management principles and tools.
• Lead the convening of Risk Owners’ Forum meetings to review WVK’s risk profile and promote shared accountability.
• Maintain ERM documentation and support special projects aimed at strengthening risk culture and automation.
• Coordinate with internal and external stakeholders to ensure alignment with best practices and regulatory guidelines.

Investigations Management

Capacity Building, Stakeholder Engagement, & Collaboration

• Receive and evaluate allegations of misconduct, fraud, safeguarding violations, and other breaches reported.
• Assess the credibility, materiality, and potential impact of each allegation to determine appropriate investigative response.
• Recommend and initiate investigative actions in a timely and structured manner, ensuring alignment with WVK protocols and legal standards.

Capacity Building, Stakeholder Engagement, & Collaboration

• Plan, lead, and conduct investigations into cases involving fraud, corruption, bribery, conflict of interest, safeguarding, and ethical misconduct, as assigned by senior leadership.
• Gather and analyze evidence, and document findings in a clear, objective, and legally sound manner.
• Ensure investigations are executed with the highest standards of confidentiality, impartiality, and professionalism.
• Prepare comprehensive investigation reports detailing findings, conclusions, and actionable recommendations, and present these to senior leadership for decision-making.

Capacity Building, Stakeholder Engagement, & Collaboration

• Lead training and awareness initiatives for staff and partners on fraud prevention, whistleblower protection, and ethical conduct to strengthen investigative competencies and promote a culture of integrity.
• Contribute to the development and implementation of investigation recommendations, fraud prevention strategies, and risk mitigation tools.
• Analyze fraud trends and emerging risks, and recommend systemic improvements to reduce organizational exposure.
• Promote a culture of continuous improvement within the investigations function by identifying opportunities to enhance investigative procedures, tools, and systems.
• Develop a deep understanding of operational processes to inform process simplification and strengthen investigative effectiveness.
• Monitor and analyze recurring issues and trends, providing insights to leadership and process owners to address systemic vulnerabilities.

KNOWLEDGE/QUALIFICATIONS FOR THE ROLE

Required Professional experience

• Minimum of 5 years of experience in risk management, compliance, investigations, audit, and forensics, with at least 3 years specifically in risk management.
• Strong investigative, research, analytical, and forensic skills.
• Excellent analytical thinking, communication, and stakeholder engagement abilities.
• Thorough knowledge of the relevant industry/sector and applicable regulatory requirements.
• Strong planning and organizational skills and proven ability to manage multiple priorities and meet strict deadlines.
• High standards of integrity and ethical conduct.
• Effective team player with strong collaboration skills across departments.
• Proficiency in Microsoft Office applications, with Office 365 as a minimum.
• Ability to understand and document workflows and business processes.
• Sound
• knowledge and application of relevant NGO policies, procedures, and compliance standards.

Required Education & Certification

• Bachelor’s Degree in Business, Economics, Law, or related fields.
• Must have proficiency in internal controls and risk Management.
• Completion of a Certification or higher in Risk Management, investigation training program, CPA (Certified Public Accountant) or CIA (Certified Internal Auditor), CA (Chartered Accountant), or CFE (Certified Fraud Examiner).

Preferred Knowledge and Qualifications

• Good understanding of the non-profit industry, risk management, and investigative work.
• Fluency in English and Kiswahili.
• Knowledge of Risk Management Systems is an added advantage.

• Lead the enhancement of WVK’s ERM framework to align with WVK’s strategy, World Vision Partnership, and regulatory expectations.
• Oversee the development of risk appetite, scoring models, and reporting structures.
• Manage the implementation of the Risk Management Policy Framework, ensuring periodic updates and alignment with Board directives or partnership requirements.
• Manage the Riskonnect system and other risk automation tools to support data-driven decision-making.
• Oversee the design and rollout of systems, standards, and procedures for risk data collection and analysis in line with the Data Protection Act.
• Ensure departments maintain Risk registers and manage compliance risks in line with the ERM framework.
• Maintain a central repository of policies, regulations, and compliance requirements.
• Engage multi-sectoral teams to integrate risk management into project implementation and operational planning.
• Conduct and oversee risk assessments across departments and projects to identify threats to organizational objectives.
• Maintain and update the enterprise risk register in collaboration with risk owners.
• Monitor WVK’s risk exposure and proactively flag emerging risks to senior leadership.
• Prepare and present risk reports and dashboards to the Board Audit & Risk Committee on a quarterly basis.
• Drive the embedding of compliance using the Integrated Compliance Monitoring Tool.
• Facilitate training sessions for staff and partners on risk management principles and tools.
• Lead the convening of Risk Owners’ Forum meetings to review WVK’s risk profile and promote shared accountability.
• Maintain ERM documentation and support special projects aimed at strengthening risk culture and automation.
• Coordinate with internal and external stakeholders to ensure alignment with best practices and regulatory guidelines.
• Receive and evaluate allegations of misconduct, fraud, safeguarding violations, and other breaches reported.
• Assess the credibility, materiality, and potential impact of each allegation to determine appropriate investigative response.
• Recommend and initiate investigative actions in a timely and structured manner, ensuring alignment with WVK protocols and legal standards.
• Plan, lead, and conduct investigations into cases involving fraud, corruption, bribery, conflict of interest, safeguarding, and ethical misconduct, as assigned by senior leadership.
• Gather and analyze evidence, and document findings in a clear, objective, and legally sound manner.
• Ensure investigations are executed with the highest standards of confidentiality, impartiality, and professionalism.
• Prepare comprehensive investigation reports detailing findings, conclusions, and actionable recommendations, and present these to senior leadership for decision-making.
• Lead training and awareness initiatives for staff and partners on fraud prevention, whistleblower protection, and ethical conduct to strengthen investigative competencies and promote a culture of integrity.
• Contribute to the development and implementation of investigation recommendations, fraud prevention strategies, and risk mitigation tools.
• Analyze fraud trends and emerging risks, and recommend systemic improvements to reduce organizational exposure.
• Promote a culture of continuous improvement within the investigations function by identifying opportunities to enhance investigative procedures, tools, and systems.
• Develop a deep understanding of operational processes to inform process simplification and strengthen investigative effectiveness.
• Monitor and analyze recurring issues and trends, providing insights to leadership and process owners to address systemic vulnerabilities.

• Strong investigative, research, analytical, and forensic skills.
• Excellent analytical thinking, communication, and stakeholder engagement abilities.
• Thorough knowledge of the relevant industry/sector and applicable regulatory requirements.
• Strong planning and organizational skills and proven ability to manage multiple priorities and meet strict deadlines.
• High standards of integrity and ethical conduct.
• Effective team player with strong collaboration skills across departments.
• Proficiency in Microsoft Office applications, with Office 365 as a minimum.
• Ability to understand and document workflows and business processes.
• Sound knowledge and application of relevant NGO policies, procedures, and compliance standards.

• Minimum of 5 years of experience in risk management, compliance, investigations, audit, and forensics, with at least 3 years specifically in risk management.
• Bachelor’s Degree in Business, Economics, Law, or related fields.
• Must have proficiency in internal controls and risk Management.
• Completion of a Certification or higher in Risk Management, investigation training program, CPA (Certified Public Accountant) or CIA (Certified Internal Auditor), CA (Chartered Accountant), or CFE (Certified Fraud Examiner).