Assistant Manager – Internal Controls & Compliance

Sidian Bank Limited is a financial institution founded in 1984 and located in Nairobi, Kenya. It operates within the Banking & Financial Services sector, providing various banking solutions.

The Assistant Manager for Internal Controls & Compliance is responsible for ensuring robust operational risk management and internal control frameworks within Sidian Bank. This involves providing independent oversight and assurance across assigned business and support units, actively participating in risk assessment processes, and monitoring control effectiveness. The role also includes supporting the remediation of identified issues and contributing to comprehensive risk reporting, all in accordance with the Bank's established policies and regulatory requirements.

1. Coordinate the implementation, maintenance, and monitoring of the Bank’s Internal Control Framework.
2. Conduct and coordinate risk-based control reviews and testing.
3. Monitor control effectiveness, identify weaknesses, and track issue remediation.
4. Support Risk and Control Self-Assessments (RCSA), Key Control Self-Assessments (KCSA), Key Risk Indicators (KRIs), and manage issues, incidents, and actions.
5. Oversee the management of incidents, issues, and actions.
6. Provide independent challenge on the adequacy and completeness of controls.
7. Prepare comprehensive risk, control assurance, and governance reports.
8. Review and challenge RCSA, KCSA, and risk assessments to ensure appropriate identification and assessment of key operational risks and controls.
9. Monitor KRIs, operational risk exposures, incidents, loss events, and emerging risks, escalating material concerns.
10. Review recurring incidents, control failures, and operational risk themes to identify underlying weaknesses.
11. Identify and assess emerging risks, ensuring they are captured in the Risk Register and RCSA with appropriate controls.
12. Provide timely operational risk information and reporting for management decision-making.
13. Support the implementation and maintenance of the Internal Control Framework.
14. Review the design and operating effectiveness of key controls and challenge their adequacy.
15. Review control self-assessments and attestations to identify gaps.
16. Identify process gaps, recurring deficiencies, and opportunities to strengthen controls.
17. Provide recommendations for improving control design, execution, and monitoring.
18. Coordinate risk-based control reviews and testing.
19. Review and challenge control testing results and assess exception resolution.
20. Assess control effectiveness against risks and objectives.
21. Monitor recurring control weaknesses and recommend corrective actions.
22. Support targeted and thematic control reviews.
23. Provide second-line oversight of significant operational incidents, loss events, and control breaches.
24. Support root-cause analysis of control failures and challenge proposed corrective actions.
25. Monitor remediation of control gaps, issues, audit findings, and regulatory actions.
26. Assess if corrective actions adequately address underlying risks.
27. Track overdue or material issues and escalate concerns.
28. Provide independent risk and control advice on new products, processes, and projects.
29. Engage process owners on identified risks and control weaknesses.
30. Support risk assessments for significant changes and projects.
31. Promote awareness of sound operational risk and internal control practices.
32. Prepare risk and control reports covering RCSA, KCSA, KRIs, incidents, and remediation.
33. Provide timely and accurate inputs to Management Risk Committees.
34. Analyze risk and control information to identify trends and weaknesses.
35. Maintain appropriate risk and control records.
36. Support regulatory reviews and governance assessments.

1. Bachelor’s Degree in Risk Management, Finance, Accounting, Economics, Business Administration, Banking, or a related field.
2. Professional qualification such as CPA(K), ACCA, CIA, CRMA, CISA, IRM, FRR, FRM, PRM, or equivalent (an added advantage).
3. Minimum five (5) years’ experience in Operational Risk, Internal Controls, Risk Assurance, Compliance, Internal Audit, or related banking risk functions.
4. Demonstrated experience in risk assessments, RCSA, KCSA, KRI monitoring, risk-based control testing, incident management, and issue remediation.
5. Sound knowledge of operational risk management, internal control principles, and risk and control governance practices.
6. Good understanding of CBK Prudential Guidelines, Basel Operational Risk Principles, and the COSO Internal Control Framework.
7. Experience in risk and control reporting, data analysis, and stakeholder engagement.
8. Strong risk assessment, control evaluation, and analytical skills.
9. Practical experience in risk-based control testing and assurance.
10. Strong operational risk monitoring, incident management, and root-cause analysis capabilities.
11. Ability to provide constructive independent challenge and exercise sound judgment.
12. Strong stakeholder engagement, influencing, and communication skills.
13. Strong report writing, data analysis, and presentation skills.
14. Strong problem-solving skills with the ability to manage multiple priorities and deadlines.