Senior Risk Officer

Role summary The Senior Risk Officer is responsible for implementing and monitoring Star Pay EMI’s enterprise risk management framework and identifying, assessing, mitigating, and reporting key financial, operational, regulatory, compliance, AML/CFT, fraud, technology, product, and reputational risks. The role focuses on strengthening internal controls and managing risks associated with EMI systems, digital platforms, mobile money, products, services, and agent networks, while working with relevant departments to ensure regulatory compliance and provide independent, timely, and data-driven risk information to senior management and the BOS. Duties and responsibilities Risk Management Framework - Implementation: Support the implementation and continuous improvement of the Enterprise Risk Management (ERM) framework in alignment with international standards (e.g., ISO 31000, COSO ERM) and local regulatory requirements. - Risk Assessments: Conduct risk assessments for new products, features, process changes, and geographic expansions, considering the unique risks of the Afghan market. - Risk Register: Maintain and regularly update the company’s risk register, identifying and evaluating operational, financial, strategic, compliance, and reputational risks. Analyze root causes and key risk indicators (KRIs). AML/CFT & Regulatory Compliance - Compliance: Act as a key player in fulfilling Star Pay’s AML/CFT obligations as a DAB-licensed EMI. Ensure adherence to the Anti-Money Laundering and Proceeds of Crime Law and FinTRACA regulations. - Reporting: Assist in the preparation and timely submission of regulatory reports, including threshold transactions and suspicious transaction reports (STRs) to FinTRACA . - Controls: Design, implement, and test preventive and detective internal controls to ensure compliance with regulatory requirements and company policies. Fraud Prevention & Operations - Fraud Mitigation: Identify and assess vulnerabilities in Star Pay’s digital channels (E-Top-up platform, Mobile Kiosk, API Services) and agent networks (Distributors, Sub-distributors, Retailers) . - Investigations: Perform ad-hoc investigations into suspicious activities, fraud incidents, or process failures, and recommend corrective actions. - Process Improvement: Partner with operational teams to propose process optimizations based on control findings and risk assessments to support better decision-making. Culture & Training - Awareness: Contribute to a risk-aware culture by supporting and designing training programs for employees, agents, and management on risk management, AML/CFT, and fraud prevention. Job requirements Education Bachelor's degree in Finance, Accounting, Risk Management, Business Administration, Economics, Law, or a related field. A Master's degree is an advantage. Professional certification such as FRM (Financial Risk Manager), CAMS (Certified Anti-Money Laundering Specialist), Certified Risk Management, or another relevant professional qualification is highly desirable. Experience: Minimum 3–5 years of relevant professional experience in risk management, internal control, internal audit, compliance, AML/CFT, or a related field. Relevant experience in banking, fintech, mobile money, electronic money institutions (EMIs), payment services, telecommunications, or financial services is strongly preferred. Proven hands-on experience in risk assessment, risk mapping, risk rating, mitigation planning, risk monitoring, KRI development, and internal control testing. Practical understanding of risk associated with digital financial services, payment platforms, mobile applications, APIs, transaction systems, and agent/distribution networks. 4. COMPETENCIES: High level of integrity, professional ethics, independence, confidentiality, and accountability. Strong understanding of enterprise risk management, internal controls, AML/CFT, fraud risk, and regulatory compliance. Ability to identify emerging risks and assess their potential impact on business objectives. Strong ability to analyze complex information, identify root causes, and develop practical risk mitigation strategies. Excellent written and verbal communication skills. Excellent report writing, presentation, and stakeholder management skills, including the ability to communicate complex risk matters to senior management and the BOS.