Group Compliance: Head of Governance, Risk and Control

Empowering Africa’s tomorrow, together one story at a time.
- With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.

Job Summary

The Head of GRC (pan African role) is responsible for leading and overseeing Compliance’s governance, risk management and internal control framework. This role ensures that internal compliance functional standards, methodologies and processes, as well as relevant governance structures are effectively and consistently implemented and integrated, supporting strategic objectives while maintaining regulatory compliance and operational resilience.
- As a key advisor to Compliance Executive leadership, this role plays a critical part in fostering a risk-aware culture, enhancing decision-making processes, and ensuring that control mechanisms align with Compliance’s risk appetite.
- The incumbent will lead a team of risk professionals and will also work collaboratively with Group Risk and Group Internal Audit to strengthen governance within Compliance.

The Head of GRC ensures that the Group Compliance function’s activities conform to Absa’s Enterprise Risk Management Framework through the implementation and embedment of the compliance management system and related best practices.

This role combines deep technical governance, risk management and control expertise, with leadership responsibilities, supporting both business enablement and regulatory integrity.

Job Description

Governance & Compliance:
- Develop, implement, and maintain Group Compliance’s corporate governance framework to ensure regulatory and internal compliance.- Advise Group Compliance’s Executive on governance best practices and regulatory requirements.- Establish procedures to promote good governance and oversight of risk and controls within the Compliance function.- Ensure the Compliance function’s adherence to relevant legal and regulatory frameworks, industry standards, as well as internal policies.- Oversee reporting to senior management, audit committees, and regulatory bodies.- Responsible for optimal combined assurance plan, governance and delivery thereof.- Responsible for maintaining all Compliance mandates, authorities and structures.

Risk Management:
- Ensure effective implementation and embedment of an ERM framework for the Group Compliance function, identifying, assessing and mitigating key risks.- Monitor emerging risks and regulatory changes, ensuring that the organisation adapts accordingly.- Collaborate to integrate risk management practices into strategic decision-making.- Conduct compliance risk assessments and stress testing, ensuring robust risk controls are in place.- Lead risk mitigation strategies, including business continuity and crisis management planning- Oversee various Compliance-related methodologies and frameworks, including the Group Compliance Charter, Compliance Manual, Regulatory Posture Framework, etc that inform and constitute the Compliance Management system.

Internal control & Assurance:
- Design and oversee internal control systems, to ensure operational efficiency in terms of policies and controls, and externally, in terms of the Sub Risk Types (SRTs).- Have oversight and accountability for the Compliance Regulatory and Policy universes.- Play the role of Quality Assurance (QA) for Compliance Risk and control.- Oversee the relevant GRC governance, including Control-related Forums, GRC Training, relevant ERC submissions etc.- Ensure that internal audits and control testing are conducted effectively, addressing any weaknesses.- Provide training and awareness programs on risk, control and internal controls.- Drive continuous improvement in compliance monitoring, testing, reporting as well as compliance assurance.

Risk Reporting, Insights and Data Analytics:
- Risk data collection and aggregation- Risk monitoring and creation of dashboards on MCO- Regulatory and compliance reporting- Relevant Board & Executive risk reporting- Incident and loss event reporting- Risk & appetite tolerance reporting- Benchmarking & industry comparisons- Audit & assurance reporting

Leadership & Stakeholder Management:
- Lead and develop the GRC team, fostering a culture of accountability and integrity, including setting objectives, mentoring, and managing performance, as well as on-the-job training, guidance and direction.- Act as a key advisor to Compliance Executive leadership on risk, control and governance matters.- Where relevant, engage with external stakeholders, including regulators, auditors and external bodies.- Promote a strong risk and compliance culture through training and communication.- Represent the Compliance function in relevant executive forums and cross-functional committees.- Drive and implement effective stakeholder engagement strategies to embed a cul