Senior Manager, Compliance & Data Privacy

NCBA Bank Kenya Plc is a financial institution based in Nairobi, Kenya, founded in 2019, offering banking and financial services.

The Senior Manager, Compliance & Data Privacy at NCBA Bank Kenya Plc is responsible for establishing and upholding an effective compliance framework that aligns with legal, regulatory, and internal policy standards. This position involves providing independent oversight, strategic challenge, continuous monitoring, and expert advisory services to the Board, management, and various business functions. Key duties include coordinating regulatory interactions and reporting, advocating for fair customer outcomes and ethical conduct, and ensuring that all significant compliance issues are promptly identified, escalated, and resolved.

1. Develop and maintain the Compliance Framework, Charter, Policy, and annual Compliance Plan.
2. Maintain regulatory registers, reporting calendars, and change trackers.
3. Define compliance indicators, reporting thresholds, and escalation protocols.
4. Preserve Compliance independence and align with governance frameworks.
5. Interpret the Insurance Act, IRA requirements, and applicable regulations, translating them into business obligations.
6. Coordinate regulatory returns, applications, attestations, and responses.
7. Prepare compliance reports for Management, Board Committees, and the IRA.
8. Maintain records of submissions, approvals, correspondence, and commitments.
9. Conduct compliance risk assessments across business operations.
10. Implement monitoring and testing programs to assess control effectiveness.
11. Document findings, corrective actions, and closure evidence.
12. Monitor regulatory changes and coordinate their implementation.
13. Provide compliance advice on products, claims, underwriting, distribution, marketing, technology, and outsourcing.
14. Review initiatives for regulatory, conduct, and reporting implications.
15. Monitor customer fairness indicators, complaints, and conduct risks.
16. Challenge decisions that could create material regulatory or reputational exposure.
17. Act as the primary liaison with the IRA on compliance matters.
18. Coordinate inspections, meetings, information requests, and responses.
19. Monitor regulatory commitments and report outcomes to Management and the Board.
20. Liaise with other regulators where applicable.
21. Maintain registers for breaches, findings, policy exceptions, and remediation actions.
22. Coordinate investigations, escalation, and corrective actions for compliance incidents.
23. Escalate significant issues through approved governance channels.
24. Coordinate annual compliance training and awareness programs.
25. Monitor completion, effectiveness, and remediation of gaps.
26. Support role-based training on conduct, conflicts, whistleblowing, financial crime, data protection, and regulatory changes.
27. Advise on data protection obligations and privacy requirements.
28. Ensure compliance with the Data Protection Act and related regulations.
29. Coordinate privacy impact assessments, data-sharing arrangements, and data-subject requests.
30. Oversee personal data breach management and privacy records.
31. Perform DPO duties where formally designated and requirements are met.
32. Maintain controls for money laundering, sanctions, and related financial crime risks.
33. Oversee applicable POCAMLA and FRC obligations, controls, and reporting.
34. Coordinate risk assessments, monitoring, recordkeeping, and remediation.
35. Perform MLRO duties where formally designated and requirements are met.
36. Maintain an individual development plan aligned to role requirements.
37. Complete professional development, regulatory updates, and continuing education.
38. Apply learning to strengthen technical expertise, leadership, and compliance oversight.

1. Hold a Bachelor’s degree in Law, Finance, Accounting, Business Administration, Insurance, Risk Management, Economics, or a related field.
2. A relevant postgraduate qualification is beneficial but not mandatory.
3. Possess a relevant professional qualification in compliance, risk, governance, internal control, insurance, audit, financial crime, or data protection.
4. Relevant credentials may include AIIK/ACII, CPA(K), ACCA, CISA, CISM, CAMS, or another recognized compliance, risk, or privacy certification, depending on the candidate’s professional background and the role’s scope.
5. Have 6–8 years of relevant experience in compliance, legal, risk, audit, governance, or regulatory affairs within a regulated financial services environment.
6. Include at least 2–3 years of experience at a supervisory or management level.
7. Demonstrate insurance experience, preferably in general insurance, or possess strong working knowledge of underwriting, claims, distribution, and policyholder protection processes.
8. Show practical experience engaging regulators, preparing executive or Board reports, conducting compliance assessments, and driving remediation to closure.