Manager, Non-Financial Risk

Company Overview

Stanbic Bank Kenya is part of Standard Bank Group, an Africa-focused financial services organization with a global outlook. The group offers opportunities to build a meaningful career while working with experienced professionals across its network. Its client base spans individuals, businesses of every size, affluent families, and large multinational companies and institutions. The organization is driven by a commitment to helping Africa grow and creating real value for customers and the communities it serves.

Role Summary

This position serves as the senior Non-Financial Risk (NFR) lead within the second line of defense. It is responsible for providing independent oversight and strategic direction for designing, adapting, rolling out, and continually improving NFR frameworks across the country.

The role must ensure that local risk practices remain aligned with Group Risk standards, recognized frameworks such as COSO and ISO 31000, and the Central Bank of Kenya (CBK) Prudential Risk Management Guidelines.

A key part of the job is to help build a strong risk-aware culture and effective control environment so the business can operate within approved risk appetite. The role also provides independent review and challenge across operational, technology, conduct, third-party, financial crime, and compliance risks.

Responsibilities

• Lead the country-level Non-Financial Risk agenda as a senior second-line risk partner.
• Guide the localization, deployment, and ongoing improvement of NFR frameworks and practices.
• Ensure alignment with Group Risk requirements, COSO, ISO 31000, and CBK Prudential Risk Management Guidelines.
• Promote a strong control culture and support disciplined risk-taking within approved appetite.
• Identify, assess, monitor, report, and help mitigate non-financial risks across the organization.
• Provide independent challenge and oversight on operational, technology, conduct, third-party, financial crime, and compliance matters.
• Prepare and present risk reports for senior governance bodies such as EXCO, RCC, and BRC.
• Escalate material issues and influence decisions on risk treatment and mitigation.
• Conduct risk assurance reviews and assess control effectiveness.
• Track remediation plans, close control gaps, and follow through to sustainable resolution.
• Coordinate with assurance providers such as Risk, Compliance, and Internal Audit where combined assurance is in place.
• Manage incidents from detection through escalation, root cause analysis, and remediation.
• Identify recurring or systemic weaknesses and drive long-term corrective actions.
• Advise business leaders while maintaining the independence expected of the second line of defense.
• Balance constructive challenge with partnership in complex stakeholder environments.

Requirements

• Bachelor’s degree in Risk Management, Finance, Accounting, Economics, or a related field.
• Professional or technical certifications are strongly preferred, such as FRM, PRM, CFA with a risk focus, CPA, ACCA, CISA, CRISC, or CIA.
• At least 8 to 10 years of risk management experience, including second- and/or third-line exposure.
• Proven ownership of the full non-financial risk lifecycle from identification through remediation.
• Practical experience implementing enterprise risk frameworks such as COSO ERM or ISO 31000, or comparable standards.
• Experience covering multiple risk categories.
• Background in preparing and presenting risk reports to executive and governance forums.
• Ability to raise material concerns and influence senior decision-making.
• Confidence to challenge senior stakeholders while maintaining professional credibility.
• Experience running risk assurance reviews and evaluating the effectiveness of controls.
• Ability to drive corrective actions and close control deficiencies.
• Exposure to combined assurance or coordination across Risk, Compliance, and Internal Audit is preferred.
• Hands-on incident management experience, including analysis of root causes and remediation tracking.
• Ability to identify underlying systemic issues and implement lasting fixes.
• Strong history of influencing business heads and senior management as a trusted advisor without compromising second-line independence.
• Capability to strike the right balance between partnership and challenge in a complex environment.

Additional Information

Behavioral competencies:

• Challenging ideas
• Influencing and persuading others
• Building subject-matter depth
• Strategic thinking
• Adapting to change
• Decision-making
• Generating insights
• Maintaining high standards

Technical competencies:

• Advanced capability in risk identification, assessment, measurement, and reporting
• Understanding of risk response strategies and control effectiveness evaluation
• Strong knowledge of NFR frameworks, policies, and risk appetite implementation
• Experience with combined assurance and governance integration
• Ability to use data, risk reporting, and analytics to support decisions
• Practical skills in incident management and root cause analysis
• Experience with risk scenario analysis and stress testing
• Knowledge of third-party risk management and due diligence oversight
• Familiarity with risk tools and systems