Risk & Quality Manager

Key Responsibilities

• Compliance Advisory: Advise client-facing teams on obligations under Kenya’s Data Protection Act, Anti-Money Laundering (AML) & Combating the Financing of Terrorism (CFT) regulations, International Ethics Standards Board for Accountants (IESBA) Code, and other compliance frameworks.
• Quality Management (SoQM): Develop, implement, and operate the firm’s System of Quality Management (SoQM) in line with ISQM 1 standards.
• Monitoring & Testing: Monitor implementation of the Quality Management Manual (QMM) and service-line manuals; perform ISQM 1 control implementation testing.
• Risk Reviews: Participate in proposal reviews to ensure risk, independence, and compliance requirements are met. Support internal and external quality reviews affecting client engagements.
• Framework Development: Devise a firm‑wide quality review framework ensuring consistent standards, risk mitigation, and continuous improvement across the organization.
• Remediation: Identify and evaluate deficiencies in the System of Quality Management and design actions to remedy identified deficiencies with relevant service line leaders. Communicate and provide training on identified deficiencies and remedial actions.
• Professional Ethics: Promote the principles of professional ethics under the International Ethics Standards Board for Accountants (IESBA).
• Audit Tracking: Track and address internal and external audit findings, including those from Grant Thornton Audit Review (GTAR) and Internal Quality Review (IQR).
• International Liaison: Liaison with Grant Thornton International on global standards.
• Policy Management: Update risk policies and procedures to ensure compliance with emerging laws; respond to risk-related queries and provide timely guidance.
• Internal Audits: Conduct periodic risk assessments, compliance reviews, and internal audits.
• Specialized Functions: Serve as the Anti-Money Laundering (AML) Officer and report concerns to the Quality Records Management Committee (QRMC). Consult on the withdrawal of audit opinions and restatement of financial statements. Facilitate the resolution of differences of opinion within engagement teams.

Requirements

• Bachelor’s degree in Risk Management, Law (LLB), Accounting, Finance, Business Administration, Information Security, or a related field.
• Professional qualifications such as CPA, ACCA, CISA, CRM, or Law degree (Advocate).
• Minimum 7 years of experience in risk management, compliance, internal audit, or related fields.
• Minimum 3 years in a supervisory or managerial role.
• Experience in a professional services firm (Audit, Tax, or Advisory) is a significant advantage.
• Strong knowledge of regulatory frameworks including the Data Protection Act, AML regulations, and ISQM standards.
• Strong organizational, time management, and analytical skills.
• Excellent written and verbal communication skills.
• Confidentiality and high professional integrity.