Senior Manager, Compliance & Data Privacy at NCBA Group

Job Purpose Statement

To develop, implement and maintain an effective, risk-based compliance framework that enables the Company to meet applicable legal, regulatory, supervisory and internal policy requirements. The role provides independent oversight, challenge, monitoring and advisory support to the Board, management and business functions; coordinates regulatory engagement and reporting; promotes fair customer outcomes and ethical conduct; and ensures that material compliance issues are identified, escalated and remediated promptly.

Key Accountabilities (Duties and Responsibilities)

Governance, Risk & Control (15%)

• Develop and maintain the Compliance Framework, Charter, Policy and annual Compliance Plan.
• Maintain regulatory registers, reporting calendars and change trackers.
• Define compliance indicators, reporting thresholds and escalation protocols.
• Preserve Compliance independence and align with governance frameworks.

Regulatory Compliance (15%)

• Interpret Insurance Act, IRA requirements and applicable regulations and translate them into business obligations.
• Coordinate regulatory returns, applications, attestations and responses.
• Prepare compliance reports for Management, Board Committees and the IRA.
• Maintain records of submissions, approvals, correspondence and commitments.

Risk Monitoring & Assurance (15%)

• Conduct compliance risk assessments across business operations.
• Implement monitoring and testing programmes to assess control effectiveness.
• Document findings, corrective actions and closure evidence.
• Monitor regulatory changes and coordinate implementation.

Business Advisory & Conduct (10%)

• Provide compliance advice on products, claims, underwriting, distribution, marketing, technology and outsourcing.
• Review initiatives for regulatory, conduct and reporting implications.
• Monitor customer fairness indicators, complaints and conduct risks.
• Challenge decisions creating material regulatory or reputational exposure.

Regulatory Engagement (10%)

• Act as the primary liaison with the IRA on compliance matters.
• Coordinate inspections, meetings, information requests and responses.
• Monitor regulatory commitments and report outcomes to Management and the Board.
• Liaise with other regulators where applicable.

Breach Management & Reporting (10%)

• Maintain registers for breaches, findings, policy exceptions and remediation actions.
• Coordinate investigations, escalation and corrective actions for compliance incidents.
• Escalate significant issues through approved governance channels.

Compliance Training & Awareness (10%)

• Coordinate annual compliance training and awareness programmes.
• Monitor completion, effectiveness and remediation of gaps.
• Support role-based training on conduct, conflicts, whistleblowing, financial crime, data protection and regulatory changes.

Data Privacy / Data Protection Officer (10%)

• Advise on data protection obligations and privacy requirements.
• Ensure compliance with the Data Protection Act and related regulations.
• Coordinate privacy impact assessments, data-sharing arrangements and data-subject requests.
• Oversee personal data breach management and privacy records.
• Perform DPO duties where formally designated and requirements are met.

Financial Crime / Money Laundering Reporting Officer (5%)

• Maintain controls for money laundering, sanctions and related financial crime risks.
• Oversee applicable POCAMLA and FRC obligations, controls and reporting.
• Coordinate risk assessments, monitoring, recordkeeping and remediation.
• Perform MLRO duties where formally designated and requirements are met.

Learning & Development (5%)

• Maintain an individual development plan aligned to role requirements.
• Complete professional development, regulatory updates and continuing education.
• Apply learning to strengthen technical expertise, leadership and compliance oversight.

Job Specifications

Academic Qualifications

• Bachelor’s degree in Law, Finance, Accounting, Business Administration, Insurance, Risk Management, Economics or a related discipline.
• A relevant postgraduate qualification is advantageous but not essential.

Professional Qualifications

• A relevant professional qualification in compliance, risk, governance, internal control, insurance, audit, financial crime or data protection is preferred.
• Relevant credentials may include AIIK/ACII, CPA(K), ACCA, CISA, CISM, CAMS or another recognized compliance, risk or privacy certification, depending on the candidate’s professional route and the role remit.

Experience

• 6–8 years’ relevant experience in compliance, legal, risk, audit, governance or regulatory affairs within a regulated financial-services environment.
• At least 2–3 years’ experience at supervisory or management level.
• Demonstrable insurance experience, preferably general insurance, or strong working knowledge of underwriting, claims, distribution and policyholder-protection processes.
• Practical experience engaging regulators, preparing executive or Board reports, conducting compliance assessments and driving remediation to closure.