Senior Non-Financial Risk Leader

Standard Bank Group is a leading African financial services group with a presence in 20 countries across Africa and other key markets globally. It offers a wide range of banking and financial services to individuals, businesses, and corporations.

To act as the senior Non-Financial Risk (NFR) leader within the second line of defense, providing strategic leadership and independent oversight for the development, localization, implementation, and continuous enhancement of NFR frameworks across the country. The role ensures alignment with Group Risk standards, internationally recognized risk management frameworks (including COSO and ISO 31000), and the Central Bank of Kenya (CBK) Prudential Risk Management Guidelines. The role drives the embedding of a strong risk culture and control environment across the organization, enabling the business to operate within approved risk appetite through proactive identification, assessment, monitoring, and mitigation of non-financial risks. It also provides independent challenge and oversight across a broad range of risk areas, including operational, technology, conduct, third-party, financial crime, and compliance risks.

1. Provide strategic leadership and independent oversight for the development, localization, implementation, and continuous enhancement of NFR frameworks across the country.
2. Ensure alignment with Group Risk standards, internationally recognized risk management frameworks (including COSO and ISO 31000), and the Central Bank of Kenya (CBK) Prudential Risk Management Guidelines.
3. Drive the embedding of a strong risk culture and control environment across the organization.
4. Enable the business to operate within approved risk appetite through proactive identification, assessment, monitoring, and mitigation of non-financial risks.
5. Provide independent challenge and oversight across a broad range of risk areas, including operational, technology, conduct, third-party, financial crime, and compliance risks.

1. First Degree in Risk Management, Finance, Accounting, Economics, or related disciplines.
2. Professional / Technical Certifications (Strongly Preferred): FRM / PRM / CFA (Risk specialization); CPA / ACCA; CISA / CRISC / CIA.
3. Minimum 8-10 years risk management experience (2nd 3rd line).
4. Demonstrated ownership of end-to-end NFR lifecycle: Risk identification, assessment, monitoring, reporting, and response.
5. Hands-on experience implementing and embedding enterprise risk frameworks, including: COSO ERM / ISO 31000 (or equivalent).
6. Proven experience covering multiple risk types.
7. Demonstrated experience in: Preparing and presenting risk reports to senior governance forums (EXCO / RCC / BRC); Escalating material risks and influencing decision-making.
8. Ability to provide independent challenges to senior stakeholders while maintaining credibility.
9. Proven ability to: Conduct risk assurance reviews / control effectiveness assessments; Drive remediation actions and close control gaps.
10. Experience with combined assurance or coordination across assurance providers (Risk, Compliance, Internal Audit) preferred.
11. Practical experience in: End-to-end incident management (identification → escalation → RCA → remediation).
12. Evidence of identifying systemic issues and driving sustainable fixes, not just reporting incidents.
13. Strong track record of: Influencing Business Heads / Senior Management; Acting as a trusted advisor while maintaining second line independence.
14. Ability to balance challenge vs. partnership, particularly in complex stakeholder environments.
15. Advanced knowledge of: Risk identification, assessment, measurement and reporting; Risk response strategies and control effectiveness evaluation.
16. Strong understanding of: Non-Financial Risk (NFR) frameworks, policies, and risk appetite implementation; Combined Assurance and governance integration; Data, risk reporting, and analytics for decision-making.
17. Practical experience in: Incident management and root cause analysis; Risk scenario analysis and stress testing; Third Party Risk Management and due diligence oversight.