Risk, Compliance and Data Protection Officer - OMIU

• Bachelor's Degree in any of the following: Risk Management, Insurance, Finance, Business Administration, Law, Accounting, Economics, Statistics, Actuarial Science, Information Systems or related field.
  

Professional Qualifications

• One or more of: IRM, CRM, ACCA, CPA, ICA Certificate in AML, CAMS, Data Protection Certification, ISO 31000 Risk Management training
  

Experience

• Minimum 3–5 years' experience in Risk Management, Compliance, Internal Audit, Governance or Data Protection.
  
• Experience within Insurance or financial services is highly desirable.
  
• Experience interacting with regulators.
  
• Experience conducting compliance reviews and enterprise risk assessments.
  
• Experience preparing Board and Management reports.
  

Enterprise Risk Management

• Support implementation of the Enterprise Risk Management Framework across all business functions.
  
• Coordinate enterprise-wide Risk and Control Self-Assessments (RCSA).
  
• Maintain the corporate risk register and ensure risks are regularly reviewed and updated.
  
• Monitor Key Risk Indicators (KRIs) and report emerging risks.
  
• Monitor adherence to approved Risk Appetite Statements and escalate breaches.
  

Operational Risk Management

• Monitor operational risks across underwriting, claims, finance, ICT, investments and support functions.
  
• Monitor implementation of key controls.
  
• Track operational losses and near misses.
  
• Identify emerging operational risks arising from new technologies, outsourcing and process changes.
  

Regulatory Compliance

• Implement the Compliance Management Framework.
  
• Maintain the regulatory universe applicable to the Company.
  
• Monitor compliance with:
  • Insurance Act
    
  • Insurance Regulatory Authority (IRA) Guidelines
    
  • Anti-Money Laundering legislation
    

Financial Crime Compliance

• Support implementation of the AML/CFT/CPF Programme.
  
• Review effectiveness of Customer Due Diligence (CDD) controls.
  
• Monitor sanctions screening and customer onboarding controls.
  
• Assist in preparation of AML regulatory returns.
  

Risk Governance

• Coordinate Risk Management Committee meetings.
  
• Prepare committee papers and minutes.
  
• Monitor implementation of committee resolutions.
  
• Coordinate periodic review of risk policies.
  

Risk Culture and Awareness

• Conduct risk and compliance awareness training.
  
• Promote risk ownership across the business.
  
• Support departmental risk champions.