Vacant Positions at CarePay Ltd

Role Description  

• We are looking for a Cyber Security & Information Security Lead  to take end-to-end ownership of security at CarePay. This is a hands-on, critical role in the organization. You will be the subject-matter expert for cyber and information security, responsible for both day-to-day execution and long-term strategic direction. 
• You will enhance and build upon existing framework, implement and operate CarePay’s security capability, while working closely with engineering, product, operations, and leadership to ensure security enables, rather than slows down, our mission. 

Cyber Security & Information Security Leadership  

• Own and continuously evolve CarePay’s information security and cyber security strategy 
• Establish and maintain security policies, standards, and controls appropriate for a growing, international insurtech 
• Turn policy into practice through effective implementation of policies, standards and controls 
• Act as CarePay’s primary authority on cyber and information security  

Data Protection and Privacy 

• Ensure appropriate protection of sensitive data, including PII, financial, and health data 
• Support or act as Data Protection Officer (DPO) where required 
• Lead or support Data Protection Impact Assessments (DPIAs) 
• Advise teams on privacy-by-design and data minimisation principles 

Risk, Governance and Compliance 

• Identify, assess, and manage security, technology and privacy risks across products, platforms, and operations 
• Lead security risk assessments and define pragmatic mitigation plans 
• Ensure alignment with relevant standards and regulations (e.g. ISO 27001, GDPR, SOC 2, local regulatory requirements) 
• Prepare for and support audits, certifications, and customer security assessments 
• Serve as a key point of contact for regulators, partners, and enterprise customers on security matters 

Secure Product and Platform Enablement 

• Partner closely with Engineering and Product teams to embed security by design and secure SDLC practices 
• Advise on cloud, application, and API security architecture 
• Oversee vulnerability management, penetration testing, and remediation efforts 
• Proactively identify emerging threats and weaknesses in CarePay’s technology stack 

Incident Preparedness and Response 

• Design and maintain CarePay’s incident response and breach management processes 
• Lead security  and privacy incident response activities when required, ensuring calm, clear communication and effective coordination 
• Drive post-incident reviews and continuous improvement 

Culture, Awareness & Influence 

• Build security and privacy awareness across CarePay through training, guidance and practical support 
• Translate technical security risks into clear business impact for non-technical stakeholders 
• Act as a trusted advisor to leadership, contributing to long-term technology and risk decisions 

Requirements 

• 8+ years’ experience in cyber and information security and privacy function, including business continuity planning and risk management  
• Solid understanding of: 
• Information security frameworks (ISO 27001, NIST, SOC 2) 
• Risk management and control design 
• Application, cloud, and API security 
• Incident response and vulnerability management 
• Data protection and privacy (GDPR) 
• Experience in regulated environments (insurtech, fintech, health, insurance, or financial services) 
• Strong knowledge of business impact assessments, disaster recovery, RTOs/RPOs and system criticality mapping 
• Hands-on experience with cloud-native environments and modern SaaS architectures 
• Proven ability to work independently with excellent communication and interpersonal skills, including delivering effective training across the company 
• Analytical and detail-oriented with a proactive approach to risk identification and mitigation 
• Experience working across multiple countries or regions is a strong advantage 

Nice to have: 

• Relevant certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer/Auditor) 
• Previous experience acting as a DPO 
• Experience scaling security in a growing or mission-driven organisation 

go to method of application »

Role Description

• The Head of Finance & Payment Operations is a senior leadership role that sits at the intersection of financial stewardship and operational execution. You will own CarePay’s financial health end-to-end — from strategic planning and investor reporting to accounting, tax compliance, and treasury — while simultaneously leading the Payment Operations function that sits at the heart of what we do: moving money reliably, compliantly, and at scale across healthcare ecosystems in Kenya and the Middle East.
• This is a rare opportunity for a commercially minded finance leader who thrives on complexity, understands the unique demands of fintech and health insurance, and is ready to be a critical voice in shaping CarePay’s next phase of growth. You will be a trusted partner to the Managing Director and a key member of the Management Team. 

Finance Leadership

• Own all Kenya financial planning, reporting, and analysis — including P&L, balance sheet, cash flow, and quarterly re-forecasting — delivered with accuracy and on time.
• Lead statutory reporting, audits, and compliance with IFRS and local tax regulatory requirements (including PAYE, withholding tax, and VAT) across all CarePay Kenya
• Drive financial and management reporting for CarePay's licensed claims subsidiary and collaborate with group finance functions across CarePay’s international operations.
• Lead annual budgeting and multi-year financial modelling; present strategic financial insights and recommendations to the executive team and board.
• Develop, implement and maintain financial policy frameworks, internal controls, and governance processes that meet both statutory requirements and best practice for a regulated fintech.
• Oversee treasury, working capital management, and banking relationships; ensure liquidity and capital efficiency across the business.
• Support deal structuring, pricing analysis, and commercial negotiations as a core member of the executive team.

Payment Operations

• Lead and continuously improve the end-to-end payment operations function, including claims disbursements, provider payments, premium collections, and mobile money integrations.
• Own payment SLAs, reconciliation accuracy, and exception management; design and enforce payment procedures and controls that ensure timeliness, accuracy, and compliance.
• Collaborate closely with Product and Technology to improve payment infrastructure, automate manual processes, and scale operations as CarePay enters new markets and segments.
• Manage relationships with payment service providers, mobile network operators, banks, and insurance regulatory counterparts relevant to fund flows.
• Ensure payment operations meet all regulatory and AML/KYC obligations across operating jurisdictions; proactively identify and mitigate operational and financial risk.

People & Organizational Leadership

• Build, mentor, and manage high-performing Finance and Payment Operations teams; set clear objectives, provide continuous feedback, and develop talent at every level.
• Serve as a visible and trusted member of the Management Team (MT); contribute commercial and operational expertise to company-wide strategy, business development, and key decisions.
• Champion a culture of accountability, operational excellence, and continuous improvement across both functions.

Requirements

• 10+ years of progressive finance leadership experience, with at least 3 years in a senior finance role within fintech, insurtech, or digital health — ideally with exposure to both East Africa and the Middle East.
• Demonstrable experience owning or closely overseeing payment operations in a regulated environment — including mobile money, claims payments, or insurance premium flows.
• Deep technical knowledge of IFRS, IAS, and statutory reporting requirements in Kenya; familiarity with insurance regulatory frameworks (IRA) is a strong advantage.
• Proven track record of hands-on financial management — you have personally owned accounting, controls, audits, and cash management, not just supervised them.
• Strong commercial acumen: experience in deal structuring, pricing strategy, investor reporting, and partnership negotiations in a growth-stage or scale-up environment.
• Experienced people leader who has built and developed finance or operations teams; comfortable setting strategy while remaining hands-on where needed.
• Professional qualification required: CPA (K), ACCA, CA, or equivalent. MBA or additional qualifications in finance, strategy, or insurance are advantageous.
• High integrity, sound judgment, and the ability to operate effectively in a fast-moving, cross-cultural, international environment — with a genuine commitment to CarePay’s mission of giving everyone the power to care.