Vacancies at Commercial International Bank (CIB) Kenya

Job Purpose Statement

• The role will be responsible for supporting the implementation and enhancement of the Third Party, Operational, Model, Reputation and Environmental / Social / Governance Risk Frameworks within the bank including appropriate processes, procedures, and tools, designed to maintain the risk profile and to embed risk management within the Bank.

Key Responsibilities

OPERATIONAL RISK

• Embed the Operational Risk Management Framework and associated policies and procedures within all units of the bank.
• Planning, scheduling, and conducting Risk and Control Self -Assessment (RCSA) and control testing for business and support functions, products, and projects.
• Maintain risk registers for risk entities, ensuring that ownership, action plans are clear, and the progress of action plans is being made in accordance with the remediation plan.
• Review Key Risk Indicators (KRIs) in liaison with the risk entities and escalate any KRI breaches.
• Review new products and processes in line with the new product procedures and as necessary conduct Post Implementation Reviews (PIRs).
• Conduct ORM bankwide risk assessments.
• Periodic training program on various risks that the bank faces to embed knowledge of policies and procedures and a robust risk culture across the business.
• Local and International Regulatory Reporting including but not limited to the Central Banks of Kenya and Egypt.

BUSINESS CONTINUITY

• Manage the Business Continuity Management program working closely with the various departments and risk teams.
• Ensure annual Business Impact Analysis and Risk Assessments are carried out for all departments and documented BCPs are in place and updated in line with the bank’s BCM
• Policy, Prudential Guidelines and International best practice.
• Schedule, coordinate and execute Business Continuity and Disaster Recovery annual tests for critical business processes and systems and document test results including lessons learnt and maintain a central repository for all tests. Coordinate follow up on actions arising from lessons learnt to their logical conclusion.
• Periodically update the bank’s business continuity / crisis management plan, facilitate simulation exercises as stipulated in the BCM policy and support committee accordingly during disruption events.
• Periodic Training of staff on BCP processes and standards .
• Conduct BCM risk assessment for key bank projects as well as oversee any BCM projects.
• Ensure Business Continuity Policy and Procedures are updated regularly to align to emerging Risks and/or changes in the operating environment, the bank’s Strategy, and best practices.
• Any other official duty that relates to Business Continuity Management may be allocated by management from time to time.

Academic

• Holds a bachelor’s degree in Business , Accounts, Finance , Computer Science, Information Systems or a related field.
• Master’s degree is an added advantage

Professional Qualifications 

• Risk certification (ORM, ISO 22301, CISA) is an added advantage.

Desired Work Experience

• At least two (2) years of relevant experience in Operational Risk / Enterprise Risk
• Management and Business Continuity Management.
• Experience in Audit / Compliance / Disaster Recovery and Operational Resilience is a plus

go to method of application »

Job Purpose Statement

• The Data Protection Officer (DPO) is responsible for ensuring the Bank's adherence to the Data Protection Act, 2019, and respective regulations. The DPO oversees the implementation and maintenance of data protection policies, conducts compliance assessment s, manages data protection documentation, and acts as the primary contact for all data protection matters within the Bank.

Key Responsibilities

Financial

• Implementing data protection measures to avoid financial penalties and fines associated with non-compliance with data protection laws.
• Ensure that data breaches are prevented, saving the Bank from potential financial losses related to data breach notifications, legal fees, and compensation claims.
• Overseeing contracts with third -party service providers to ensure they comply with data protection regulations, thereby avoiding financial risks related to third -party breaches or non - compliance.
• Conducting data protection impact assessments (DPIAs) to identify and mitigate potential financial risks associated with data processing activities.
• Managing insurance policies related to data protection and cyber liability to ensure the Bank is financially protected against potential data breaches or cyber incidents.

Customer

• Act as the key contact person to data subjects by informing them about how their personal
• data is being used and what measures the Bank has put in place to protect their data.
• Offer consultation on how to deal with privacy breaches.

Internal Business Process

• Align the Bank’s processes, policies, and contracts with the Data Protection Act, 2019, and respective regulations.
• Conduct a Bank-wide gap analysis on compliance with the Data Protection Act, 2019, and respective regulations.
• Oversee the development and review of policies, procedures, and guidelines to facilitate compliance with data protection laws and regulations.
• Act as the custodian of data protection documentation and reporting requirements, including records of processing activities, data protection impact assessments, data incident records, and data breach reporting.
• Evaluate the existing data protection framework, identify areas of non -compliance, and rectify any issues.
• Conduct regular assessments to ensure the Bank’s compliance with the Data Protection Act, 2019, and respective regulations.
• Identify and evaluate the Bank’s data processing activities, maintaining an updated data processing inventory.

Functional Responsibilities

• Serve as the primary point of contact within the Bank for staff, regulators, and relevant data protection authorities.
• Act as the expert in data protection, providing information and creating awareness across the Bank on data protection matters.
• Advise staff on data protection compliance issues and data subject access requests.
• Work collaboratively and proactively with the legal and compliance team on data protection issues.
• Inform and advise the Data Controller or Data Processor on all matters related to data protection

Job Specification

Academic

• Bachelor’s degree in Law, Information Technology, or a related field.
• Professional Qualifications & Experience
• Proficiency in Microsoft Office Suite
• Certification in Data Protection or Privacy Law (e.g., CIPP/E, CIPM) is preferred.

Desired Work Experience

• Minimum of 5 years of experience in data protection, compliance, or a related field.
• Proven experience in a regulatory environment, preferably within the banking or financial sector.