Execute operational and compliance risk management activities in accordance with the Bank's policies, procedures, risk framework, and regulatory requirements.
Perform risk and control assessments, including identification of key risks, documentation of controls, and evaluation of control design and operating effectiveness.
Support identification and monitoring of non financial risks, including but not limited to:
Operational Risk
Conduct Risk
Fraud Risk
Third Party Risk
Business Continuity and Operational Resilience
Data Risk and Regulatory Compliance (including AML/CTF, where applicable)
Assist in embedding effective controls into business processes, new initiatives, system implementations, product launches, and process changes.
Support reporting, assessment, escalation, and remediation of operational risk events and incidents.
Perform root‑cause analysis on incidents and control failures to identify gaps, weaknesses, or process deviations.
Track remediation and preventive action plans to ensure timely and effective closure.
Conduct thematic, process, or control reviews as assigned to identify potential risk exposures or control breakdowns.
Promote strong risk awareness and compliance culture within the department.
Support risk and compliance training, awareness sessions, and departmental communications.
Keep abreast of regulatory developments and internal policy changes relevant to CMTB.
Governance, Monitoring and Reporting
Monitor key risk indicators (KRIs), control metrics, and compliance measures for the department.
Prepare risk reports, dashboards, and management information for escalation to the Head of Risk and Control and relevant stakeholders.
Maintain accurate and up‑to‑date risk registers, incident logs, control documentation, SOPs, and risk artefacts.
Support regulatory gap analysis for new or revised regulatory guidelines, policies, or procedures impacting CMTB.
Work closely with HODs, Heads of Units, and Process Owners to ensure policies, procedures, and SOPs are aligned with the Bank's risk framework.
Provide practical risk and control advisory to business units, focusing on prevention rather than detection.
Liaise with 2 nd Line of Defence (Risk, Compliance) on risk matters, reviews, issues, and closures.
