Risk Manager

Risk Manager

BrighterMonday Consulting

Management & Business Development

Today

Easy apply

New

Kampala

Full Time

Healthcare

Confidential

Share link

Share on WhatsApp

Share on LinkedIn

Share on Facebook

Share on Twitter

Share via SMS

Job summary

The Risk Manager is responsible for enhancing, implementing, and continuously improving the Infectious Diseases Institute’s Enterprise Risk Management (ERM) framework. The role provides operational oversight of institutional risk, strategic oversight remains the responsibility of the Board, delegated to the Executive Director and the Senior Management Team, supports evidence-based decision-making across the organization, and ensures IDI operates within acceptable risk tolerance levels.

Min Qualification:

Bachelors

Experience Level

Mid level

Experience Length

7 years

Language Requirement

English

Working Hours:

Full Time - 8 to 5

Applicant Location

Uganda

Job descriptions & requirements

ClassificationFixed Term (Full Time)

Reporting ToExecutive Director

Department Executive Director’s Office

Location Kampala, Uganda

ROLE DEFINITION

The Risk Manager is responsible for enhancing, implementing, and continuously improving the Infectious Diseases Institute’s Enterprise Risk Management (ERM) framework. The role provides operational oversight of institutional risk, strategic oversight remains the responsibility of the Board, delegated to the Executive Director and the Senior Management Team, supports evidence-based decision-making across the organization, and ensures IDI operates within acceptable risk tolerance levels.

The Risk Manager supports risk identification, assessment, monitoring, and reporting; institutional compliance; and business continuity planning. The role works in close collaboration with the Internal Audit team, maintaining a clear and complementary division of responsibilities: The Risk Manager focuses on forward-looking risk prevention and compliance, while Internal Audit retains full ownership of the whistleblower mechanism, fraud detection, investigation, and audit assurance.

KEY RESPONSIBILITIES

• Enterprise Risk Management Framework

• Enhance, maintain, and continuously improve IDI’s ERM framework, policies, and procedures in line with international best practice (e.g., ISO 31000, COSO ERM) and the NGO operating context in Uganda.

• Establish and embed a consistent risk management methodology across all departments, programs, and projects.

• Maintain and regularly update the institutional risk register, ensuring all risk categories are accurately assessed, assigned to appropriate risk owners, and actively mitigated, with risks falling within Internal Audit’s mandate captured in coordination with that function.

• Coordinate periodic risk assessment exercises at both the institutional and program levels, facilitating risk workshops with departmental heads and the Senior Management Team.

• Prepare and present comprehensive risk reports to the Executive Director, Senior Management Team, and the Board, as required.

• Monitor the external risk environment, including regulatory, political, financial, and reputational risks relevant to IDI’s operations and donor-funded programs.

• Advise management on reputational risk considerations arising from program activities, partnerships, communications, or external developments.

• Risk Culture and Capacity Building

• Champion a risk-aware culture across IDI by providing training, guidance, and practical tools that embed risk thinking at all levels of the organization.

• Develop and maintain risk management guidance documents, toolkits, and templates for use by program and departmental teams.

• Provide advisory support to project teams on risk identification and mitigation as part of project planning and implementation cycles.

• Design and deliver periodic risk management training for risk owners, departmental heads, and project teams, and monitor the uptake and effectiveness of these initiatives.

• Compliance

• Serve as IDI’s institutional lead for regulatory and donor compliance, ensuring operations remain aligned with applicable Ugandan legal and regulatory requirements, donor requirements, and internal policies. This role is distinct from the fraud-related Compliance Officer function designated to the Senior Manager, Internal Audit under the Anti-Fraud and Whistle-blower Policy.

• Monitor and report on compliance with donor requirements, working closely with the Grants and Contracts team to identify and escalate compliance risks promptly.

• Coordinate with relevant teams to ensure IDI’s policies are current, communicated effectively, and consistently applied across the organization.

• Identify and monitor safeguarding-related compliance risks, ensuring IDI’s safeguarding policy and procedures are embedded across all operations and partner engagements.

• Support the development and periodic review of IDI’s data protection and privacy risk controls in line with applicable requirements.

• In collaboration with Internal Audit, lead staff awareness and training initiatives on compliance obligations, IDI’s Code of Conduct, and relevant institutional policies, including fraud prevention awareness, which remains distinct from fraud investigation.

• Business Continuity Planning (BCP)