Risk Manager

About the role

The Risk Manager will lead the development, implementation and continuous improvement of the Infectious Diseases Institute’s Enterprise Risk Management (ERM) framework. Reporting to the Executive Director, the role ensures the organization operates within defined risk tolerances and supports evidence‑based decision‑making across all programmes.

Key responsibilities

• Enhance, maintain and embed the ERM framework, policies and procedures in line with ISO 31000, COSO ERM and local NGO best practice.
• Coordinate risk assessment workshops, keep the institutional risk register up‑to‑date and assign risk owners.
• Prepare and present risk reports for senior management and the Board, and monitor external risk factors such as regulatory, political and reputational risks.
• Champion a risk‑aware culture by delivering training, toolkits and guidance to all departments.
• Lead regulatory and donor compliance, working closely with Grants & Contracts and safeguarding teams.
• Oversee Business Continuity Planning and Disaster Recovery, conduct impact analyses and testing exercises.
• Collaborate with Internal Audit and external auditors, regulators and donors on risk and compliance matters.

Required profile

• Bachelor’s degree in Finance, Accounting, Business Administration, Law or related field; professional risk‑management qualification (e.g., IRM, CRMA) required.
• Minimum 7 years of progressive risk‑management or compliance experience, with at least 3 years in a managerial role.
• Experience in NGOs or donor‑funded programmes and familiarity with major donor requirements (PEPFAR, USAID, Global Fund, etc.) is strongly preferred.

Required skills

• Strong knowledge of enterprise risk‑management frameworks (ISO 31000, COSO ERM).
• Understanding of Ugandan regulatory and legal requirements for NGOs.
• Proficiency with risk‑management tools, reporting systems and MS Office applications.
• Knowledge of safeguarding principles and data‑protection frameworks applicable in Uganda.