Risk, Compliance and Data Protection Officer – OMIU

Job Description

Requirements

• Bachelor's degree in Risk Management, Insurance, Finance, Business Administration, Law, Accounting, Economics, Statistics, Actuarial Science, Information Systems or related field
• Professional Qualifications (one or more): IRM, CRM, ACCA, CPA, ICA Certificate in AML, CAMS, Data Protection Certification, ISO 31000 Risk Management training
• Minimum 3–5 years' experience in Risk Management, Compliance, Internal Audit, Governance or Data Protection
• Experience within Insurance or financial services is highly desirable
• Experience interacting with regulators
• Experience conducting compliance reviews and enterprise risk assessments
• Experience preparing Board and Management reports
• Strong understanding of risk management, internal control and corporate governance frameworks
• Good knowledge of money-laundering risks and regulations; excellent knowledge of compliance standards and legislation
• Strong interpersonal, team leadership, strategic and analytical thinking, result-oriented, strong communication and organisation

Responsibilities

• Enterprise Risk Management — support implementation of the Enterprise Risk Management Framework
• Coordinate enterprise-wide Risk and Control Self-Assessments (RCSA)
• Maintain the corporate risk register; monitor Key Risk Indicators (KRIs) and report emerging risks
• Monitor adherence to approved Risk Appetite Statements and escalate breaches
• Coordinate risk incident reporting, root cause analysis and tracking of corrective actions
• Facilitate periodic risk assessments across all departments
• Support scenario analysis and stress testing where applicable
• Prepare monthly, quarterly and annual risk reports for Management and Board Risk Committees
• Support Business Continuity Management (BCM) Framework and Business Impact Analysis
• Operational Risk Management — monitor operational risks across underwriting, claims, finance, ICT, investments and support functions
• Monitor implementation of key controls; track operational losses and near misses
• Identify emerging operational risks from new technologies, outsourcing and process changes
• Regulatory Compliance — implement the Compliance Management Framework; maintain the regulatory universe applicable to the Company
• Monitor compliance with Insurance Act, IRA Guidelines, Anti-Money Laundering legislation, tax regulations
• Execute customer due diligence (KYC), ongoing and enhanced due diligence, and maintain data quality
• Identify and monitor potential AML, Sanctions or Compliance breaches and escalate to Risk and Compliance Office

Benefits

• Cross-functional role at Old Mutual Uganda covering Risk, Compliance and Data Protection
• Exposure to regulators including IRA and FIA
• Career growth in ERM, AML/CFT, and data protection at a major African financial services organisation