Background information about the job or company (e.g., role context, company overview)

MAL Consultancy is a human resource solutions and services consulting company based in Kenya, providing strategic and operational support to align your people strategy to drive the achievement of your strategic business needs. We pride in having expertise in a broad range of specialties in human resource management as strategic business partners.

Our client, a real-time payment services company established under the National Payment System (NPS) Act, to address the challenge of inter-bank money transfers in the country and beyond, is seeking to onboard a Manager – Enterprise Risk & Governance.

Responsibilities or duties

The Manager - Enterprise Risk & Governance is responsible for leading enterprise risk management, third-party risk management, audit coordination, operational quality assurance, policy governance, and enterprise risk culture initiatives. S/he will serve as a key second line of oversight to the business, ensuring that enterprise risks are identified, assessed, monitored, mitigated, and reported effectively while supporting regulatory compliance and sound governance practices. The Manager - Enterprise Risk & Governance will need to have strong partnership management ability in order to engage both internal and external stakeholders.

Qualifications or requirements (e.g., education, skills)

Bachelor’s Degree in Risk Management, Finance, Accounting, Business Administration, Economics, Law, Information Systems, or any other related discipline

Professional qualification in risk, audit, compliance, governance, or a related field.

Relevant professional certifications such as CRMA, CERM, FRM, CIA, CISA, CPA/ACCA, or equivalent is desirable

Enterprise risk management and risk framework implementation.

Operational risk assessment and mitigation.

Third-Party Risk Management (TPRM) and vendor due diligence.

Audit coordination, engagement management, and remediation tracking.

Policy governance, gap assessment, and compliance maturity frameworks.

Risk appetite and KRI/KPI development and backtesting.

Regulatory and compliance risk awareness across virtual assets, cross-border channels, and payment systems

Contract and SLA governance (including CLM platform integration)

Proficiency in risk management, reporting, GRC, and data-analysis tools

Risk reporting and executive-level presentation

Facilitation, workshop delivery, and training skills

Project and change management skills

Attention to detail, and sound professional judgment

Ability to work across multiple business functions and influence stakeholders without direct authority.

A collaborative working style and a strong business partnering orientation

Knowledge of applicable laws and regulations within the field of enterprise risk and governance with a strong understanding of business issues and opportunities

High level of integrity, confidentiality, trust, and dependability with a strong sense of urgency

Results-oriented, entrepreneurial, self-motivated, self-starter, who is flexible and adaptable to rapid change and has the ability to work in a fast-paced, high-demand environment

Experience translating KPIs to teams to get buy-in and results

Strong interpersonal, communication, and presentation skills with a good focus on organization and enhanced multitasking abilities

Ability to leverage AI systems and tools with a good grasp of enterprise risk & governance management systems

Ability to communicate information, whether technical or non-technical to stakeholders in a clear and concise manner

Highly analytical with quantitative risk assessment and strong problem-solving skills.

Experience needed

7 years

Any other provided details (e.g., benefits, work environment, team info, or additional notes)

If you are interested in applying for this exciting opportunity and have the requisite work experience, skills, and education and have worked within the FinTech or financial services sector holding a similar role, we are interested in meeting you.

• Operationalize the enterprise risk management framework and Risk Appetite Statement (RAS).
• Conduct quarterly departmental risk register revalidations with business unit heads
• Maintain the enterprise risk heat map and monitor Key Risk Indicators (KRIs)
• Conduct operational procedure quality assurance reviews across key business functions
• Facilitate quarterly enterprise risk deep-dive sessions with business unit heads.
• Establish real-time risk tracking and reporting interfaces across operational units.
• Support identification, assessment, treatment, monitoring, and escalation of enterprise and operational risks.
• Manage the end-to-end Third-Party Risk Management (TPRM) lifecycle
• Conduct initial and annual risk due diligence assessments for key vendors and third-party partners
• Monitor vendor compliance with contractual Service Level Agreements (SLAs) and applicable security standards
• Maintain an up-to-date TPRM inventory and continuous vendor risk scorecards
• Ensure material third-party risks are appropriately escalated and mitigated.
• Coordinate internal, external, and Central Bank of Kenya (CBK) supervisory audit engagements
• Coordinate audit planning, onsite activities, document requests, interviews, and management responses
• Maintain a centralized audit issue and remediation tracking register
• Monitor business-unit remediation timelines
• Conduct post-remediation validation testing to confirm closure of audit findings.
• Conduct enterprise-wide policy gap assessments
• Establish baseline compliance maturity assessments across operational units
• Review and remediate outdated, incomplete, or missing enterprise policies
• Coordinate company-wide policy attestation exercises
• Support policy harmonization and legal governance
• Support migration of contract administration to an automated Contract Lifecycle Management (CLM) platform integrated with TPRM processes
• Design and deliver annual risk management training covering ERM, AML/CFT, data privacy, and related risk areas
• Establish and coordinate departmental risk champions
• Develop risk accountability and micro-training initiatives
• Conduct quarterly risk awareness and accountability sessions.
• Develop risk controls for regional remittance and cross-border payment channels
• Establish sanctions screening, FX liquidity, credit, and settlement risk controls
• Develop due diligence and vetting frameworks for Virtual Asset Service Providers (VASPs)
• Monitor regional regulatory developments affecting virtual assets and cross-border financial flows.
• Facilitate Management Committee (MCT) calibration workshops on enterprise risks.
• Support identification and prioritization of the Top 5 Enterprise Risks.
• Develop quantitative risk metrics and Green/Amber/Red risk thresholds.
• Back test proposed risk thresholds against historical incident data.
• Establish automated escalation triggers for emerging risk exposures.
• Coordinate the governance process for formal RAS endorsement and Board Audit & Risk Committee (BARC) approval.
• Maintain knowledge of the function, stay abreast with the latest practices, trends, and technologies
• Model best practices in enterprise risk and governance operations and activities in order to ensure maintenance of quality performance
• Update job knowledge by participating in conferences and educational opportunities, reading professional publications, maintaining personal networks, and participating in relevant professional associations
• Maintain quality service and partnerships by establishing and enforcing company policies, procedures, standards, and values
• Put in place proper quality control checks and balances within each operational activity assigned to the function
• Regularly report on key performance indicators (KPIs) for all enterprise risk & governance-led projects and operations, demonstrating progress towards established goals and identifying areas for improvement.
• Any other duties as required.

• Enterprise risk management and risk framework implementation.
• Operational risk assessment and mitigation.
• Third-Party Risk Management (TPRM) and vendor due diligence.
• Audit coordination, engagement management, and remediation tracking.
• Policy governance, gap assessment, and compliance maturity frameworks.
• Risk appetite and KRI/KPI development and backtesting.
• Regulatory and compliance risk awareness across virtual assets, cross-border channels, and payment systems
• Contract and SLA governance (including CLM platform integration)
• Proficiency in risk management, reporting, GRC, and data-analysis tools
• Risk reporting and executive-level presentation
• Facilitation, workshop delivery, and training skills
• Project and change management skills
• Attention to detail, and sound professional judgment
• Ability to work across multiple business functions and influence stakeholders without direct authority.
• A collaborative working style and a strong business partnering orientation
• Knowledge of applicable laws and regulations within the field of enterprise risk and governance with a strong understanding of business issues and opportunities
• High level of integrity, confidentiality, trust, and dependability with a strong sense of urgency
• Results-oriented, entrepreneurial, self-motivated, self-starter, who is flexible and adaptable to rapid change and has the ability to work in a fast-paced, high-demand environment
• Experience translating KPIs to teams to get buy-in and results
• Strong interpersonal, communication, and presentation skills with a good focus on organization and enhanced multitasking abilities
• Ability to leverage AI systems and tools with a good grasp of enterprise risk & governance management systems
• Ability to communicate information, whether technical or non-technical to stakeholders in a clear and concise manner
• Highly analytical with quantitative risk assessment and strong problem-solving skills.

• Bachelor’s Degree in Risk Management, Finance, Accounting, Business Administration, Economics, Law, Information Systems, or any other related discipline
• Professional qualification in risk, audit, compliance, governance, or a related field.
• Relevant professional certifications such as CRMA, CERM, FRM, CIA, CISA, CPA/ACCA, or equivalent is desirable