Group Chief Risk Officer (CRO)

Purpose

Owns Group-wide Enterprise Risk Management (ERM). Independently identifies, assesses, and mitigates strategic, operational, financial, and compliance risks across the Quad-Hub footprint, operating entirely independently of the Internal Audit function.

Key responsibilities

• Maintain and continuously update the consolidated EAC/IGAD & UN Risk Register.
• Operationalize risk mitigation strategies and track the closure of mitigation actions.
• Conduct independent risk assessments for all M&A, JVs, and CAPEX > $2M prior to Board submission.
• Coordinate with Country Legal/Compliance on local geopolitical, regulatory, and security risk incidents.
• Present the quarterly Enterprise Risk Dashboard directly to the Board Audit & Risk Committee.

Qualifications

• Master's in Risk Management, Finance, or Law
• 10+ years enterprise risk management
• CRM, IRM, or CPA/CIA certification
• Deep experience in emerging markets, multilateral donor compliance, and cross-border conglomerate operations

Performance indicators

• Risk Register currency 100%
• Mitigation action closure rate ≥ 90%
• Zero unmitigated critical risks in Board reporting
• 100% independent risk verification for all M&A/CAPEX > $2M
• 100% of critical risks have active mitigation plans
• Zero unforeseen material risk events
• ERM framework audit score ≥ 95%

Reports to

Group CEO (Solid); Board Audit & Risk Committee (Dotted)